CVE-2005-4766

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encrypt multicast traffic, which might allow remote attackers to…

published April 1, 2006

CVSS
—
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encrypt multicast traffic, which might allow remote attackers to read sensitive cluster synchronization messages by sniffing the multicast traffic.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01444 · 72.9th percentile
Published
2006-04-01T02:00Z
EPSS history
Timeline
  • 01 APR 02:00Z
    BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encrypt multicast traffic, which might allow remote attackers to…
    cvelistv5