CVE-2004-2424: Bea WebLogic Server

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a denial of service (network port consumption) via unknown actions in HTTPS sessions, which prevents the server from releasing the network port when the session ends.

Affected products

• Bea WebLogic Server: version 8.1 only

Published 2004-12-31. Last modified 2026-06-16.