CVE-2005-4749

no score yetEPSS 1.9%

HTTP request smuggling vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier allows remote attackers to inject arbitrary HTTP headers via unspecified attack vectors.

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
Published: 2005-12-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

bea:weblogic_server

References

http://dev2dev.bea.com/pub/advisory/159
http://dev2dev.bea.com/pub/advisory/177
http://secunia.com/advisories/17138
http://www.securityfocus.com/bid/15052
http://www.securityfocus.com/bid/17163

Check your stack JSON