CVE-2005-4759: Bea WebLogic Server

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitivity, which might cause local users to inadvertently lose protection of Web Application pages.

Affected products

  • Bea WebLogic Server: version 7.0 only; version 8.1 only

Published 2005-12-31. Last modified 2026-06-16.