CVE-2005-0432: Bea WebLogic Server

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest why an authentication attempt fails, which makes it easier for remote attackers to guess passwords via brute force attacks.

Affected products

• Bea WebLogic Server: version 7.0 only; version 8.1 only

Published 2005-05-02. Last modified 2026-06-16.