Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2005-1744

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

BEA WebLogic Server和WebLogic Express 7.0至Service Pack 5版本当系统重新部署一个应用系统时未让用户登出系统，这些用户可以不需要重新登录地继续访问该应用系统，这可能会违反了新修改的安全限制或角色映射。

AI Predicted 5.3 Difficulty: Moderate EPSS 2.14% · P80
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2005-1744

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without having to log in again, which may be in violation of newly changed security constraints or role mappings.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
BEA WebLogic Server和WebLogic Express多个远程漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
BEA WebLogic Server和WebLogic Express 7.0至Service Pack 5版本当系统重新部署一个应用系统时未让用户登出系统，这些用户可以不需要重新登录地继续访问该应用系统，这可能会违反了新修改的安全限制或角色映射。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2005-1744

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2005-1744

请登录查看更多情报信息。

Vendor Advisories for CVE-2005-1744 (4)

Other References for CVE-2005-1744 (1)

Same Patch Batch · n/a · 2005-05-24 · 46 CVEs total

CVE-2005-1736 PROMS漏洞
CVE-2005-1739 ImageMagick和GraphicsMagick XWD解码器拒绝服务漏洞
CVE-2005-1741 Gearbox Software Halo Game Server无限循环拒绝服务漏洞
CVE-2005-1745 BEA WebLogic Server和WebLogic Express多个远程漏洞
CVE-2005-1746 BEA WebLogic Server和WebLogic Express多个远程漏洞
CVE-2005-1747 BEA WebLogic Server和WebLogic Express多个远程漏洞
CVE-2005-1748 BEA WebLogic Server和WebLogic Express多个远程漏洞
CVE-2005-1749 BEA WebLogic Server和WebLogic Express多个远程漏洞
CVE-2005-1743 BEA WebLogic Server和WebLogic Express多个远程漏洞
CVE-2005-1737 PROMS 未知漏洞
CVE-2005-1738 Iron Bars SHell本地格式化字符串漏洞
CVE-2005-1735 PROMS跨站脚本攻击(XSS)漏洞
CVE-2005-1734 PROMS 多个SQL注入漏洞
CVE-2005-1733 Cookie Cart漏洞
CVE-2005-1732 Cookie Cart漏洞
CVE-2005-1719 Avast!杀毒未明扫描规避漏洞
CVE-2005-1718 LS Games War Times 存在缓冲区溢出漏洞
CVE-2005-1717 Zyxel Prestige 650R-31路由器远程拒绝服务漏洞
CVE-2005-1716 TOPo 漏洞
CVE-2005-1715 EJ3 TOPo多个Index.PHP跨站脚本攻击漏洞

Showing top 20 of 46 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2005-1744

No comments yet

Leave a comment