CVE-2005-1742: Bea WebLogic Server

Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days.

BEA WebLogic Server and WebLogic Express 8.1 SP2 and SP3 allows users with the Monitor security role to "shrink or reset JDBC connection pools."

Affected products

• Bea WebLogic Server: version 6.0 only; version 6.1 only; version 7.0 only; version 7.0.0.1 only; version 8.1 only
• Oracle WebLogic Portal: version 8.0 only

Published 2005-05-24. Last modified 2026-06-16.