CVE-2005-4749

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

HTTP request smuggling vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier allows remote attackers to inject arbitrary HTTP headers via unspecified attack vectors.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://dev2dev.bea.com/pub/advisory/159Patch, Vendor Advisory
http://dev2dev.bea.com/pub/advisory/177Patch, Vendor Advisory
http://secunia.com/advisories/17138Third Party Advisory
http://www.securityfocus.com/bid/15052Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/17163Third Party Advisory, VDB Entry
http://dev2dev.bea.com/pub/advisory/159Patch, Vendor Advisory
http://dev2dev.bea.com/pub/advisory/177Patch, Vendor Advisory
http://secunia.com/advisories/17138Third Party Advisory
http://www.securityfocus.com/bid/15052Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/17163Third Party Advisory, VDB Entry

Timeline

Published: Dec 31, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005