Vulnerability Details CVE-2004-2424
BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a denial of service (network port consumption) via unknown actions in HTTPS sessions, which prevents the server from releasing the network port when the session ends.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.2%
CVSS Severity
CVSS v2 Score 5.0
References
- http://dev2dev.bea.com/pub/advisory/7
- http://secunia.com/advisories/11864
- http://securitytracker.com/id?1010492
- http://www.osvdb.org/7076
- http://www.securityfocus.com/bid/10544
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16419
- http://dev2dev.bea.com/pub/advisory/7
- http://secunia.com/advisories/11864
- http://securitytracker.com/id?1010492
- http://www.osvdb.org/7076
- http://www.securityfocus.com/bid/10544
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16419
Products affected by CVE-2004-2424
-
cpe:2.3:a:bea:weblogic_server:8.1