CVE-2004-0652
BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1...
CVE-2004-0652 is a high vulnerability (CVSS 7.2) in Bea Weblogic Server, published July 13, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. No source names a fixed version.
BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods.
Exploit likelihood
What each source reports
NVD Score used
BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods.
- Record
CVE-2004-0652- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods.
- Record
CVE-2004-0652- Updated
- 2026-11-02
EUVDEUVD-2004-0651 No score
BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods.
- Record
EUVD-2004-0651- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v87f-rphr-f72x No score
BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1...
BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods.
- Record
GHSA-v87f-rphr-f72x- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
securityfocus.com/bid/10133
dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp
osvdb.org/5296
securitytracker.com/id?1009766
exchange.xforce.ibmcloud.com/vulnerabilities/15865
secunia.com/advisories/11359
kb.cert.org/vuls/id/352110
nvd.nist.gov/vuln/detail/CVE-2004-0652
github.com/advisories/GHSA-v87f-rphr-f72x