CVE-2005-4756

HIGH · CVSS 7.5 EPSS 1.79%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-12-31 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2005-4756

Severity

HIGH

CVSS

7.5

EPSS

1.79%

Original NVD Description

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not properly validate derived Principals with multiple PrincipalValidators, which might allow attackers to gain privileges.