CVE-2007-5576: Bea Tuxedo

Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days.

BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.

Affected products

• Bea Tuxedo: version 8.0 only; version 8.1 only
• Bea WebLogic Integration: version 8.1 only; version 9.2 only
• Bea WebLogic Server: version 5.1 only; version 6.1 only; version 7.0 only; version 7.0.0.1 only; version 8.1 only; version 9.0 only; …
• Bea WebLogic Workshop: version 8.1 only
• Oracle WebLogic Portal: version 9.2 only

Published 2007-10-18. Last modified 2026-06-16.