{"id":"CVE-2005-1748","aliases":["EUVD-2005-1750","GHSA-92xh-w9hh-vw59"],"status":"published","title":"The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0...","description":"The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02628,"percentile":0.85605,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2005-05-24T04:00:00Z","modified":"2026-06-16T22:13:36Z","products":[{"vendor":"bea","product":"weblogic_server"},{"vendor":"oracle","product":"weblogic_portal"}],"references":[{"url":"http://secunia.com/advisories/15486","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2005/0608","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://securitytracker.com/id?1014049","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/13717","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://dev2dev.bea.com/pub/advisory/131","tags":["vendor-advisory","x_refsource_BEA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1748"},{"url":"https://github.com/advisories/GHSA-92xh-w9hh-vw59"}],"sources":{"cve":[{"id":"CVE-2005-1748","description":"The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service.","status":"published","published":"2005-05-24T04:00:00Z","modified":"2024-08-07T21:59:24.218Z","updated_at":"2026-11-02T14:33:39.916766Z"}],"euvd":[{"id":"EUVD-2005-1750","description":"The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service.","status":"published","published":"2005-05-24T04:00:00Z","modified":"2024-08-07T21:59:24Z","updated_at":"2026-11-03T01:15:33.246394Z"}],"ghsa":[{"id":"GHSA-92xh-w9hh-vw59","title":"The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0...","description":"The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service.","status":"published","published":"2022-05-01T02:01:37Z","modified":"2023-01-30T05:07:39Z","updated_at":"2026-11-02T14:47:44.045825Z"}],"nvd":[{"id":"CVE-2005-1748","description":"The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote attackers to view user entries or cause a denial of service.","status":"published","published":"2005-05-24T04:00:00Z","modified":"2026-06-16T22:13:36.927Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:55.600202Z"}]}}