CVE-2004-0713

The remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic Express version 8.1 through SP2, 7.0 through SP4, and 6.1 through…

published July 21, 2004

CVSS
—
EPSS
3%
Percentile
87.8
In the wild
Unconfirmed
What it is

The remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic Express version 8.1 through SP2, 7.0 through SP4, and 6.1 through SP6, does not properly check EJB permissions before unexporting a bean, which allows remote authenticated users to remove EJB objects from remote views before the security exception is thrown.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03169 · 87.8th percentile
Published
2004-07-21T04:00Z
EPSS history
Timeline
  • 21 JUL 04:00Z
    The remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic Express version 8.1 through SP2, 7.0 through SP4, and 6.1 through…
    cvelistv5