CVE-2005-4764: Bea WebLogic Server

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect password guesses, which allows remote attackers who know or guess the admin account name to cause a denial of service (blocked admin logins).

Affected products

• Bea WebLogic Server: version 6.1 only; version 7.0 only; version 8.1 only

Published 2005-12-31. Last modified 2026-06-16.