{"cve":"CVE-2005-4765","nvd":{"published":"2005-12-31T05:00:00.000","modified":"2026-06-16T22:19:23.360","status":"Modified","description":"BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier and 7.0 SP6 and earlier, when using the weblogic.Deployer command with the t3 protocol, does not use the secure t3s protocol even when an Administration port is enabled on the Administration server, which might allow remote attackers to sniff the connection.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["http://dev2dev.bea.com/pub/advisory/156","http://secunia.com/advisories/17138","http://www.securityfocus.com/bid/15052","http://dev2dev.bea.com/pub/advisory/156","http://secunia.com/advisories/17138"],"products":["bea:weblogic_server"],"source":"nvd","synced_at":"2026-10-19T19:40:09.211843075+00:00"},"epss":{"cve":"CVE-2005-4765","score":0.02124,"percentile":0.81909,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}