CVE-2004-0652
Estado: ModificadaAlta (7.2)—
BEA WebLogic Server y WebLogic Express 7.0 a 7.0 Service Pack 4, y 8.1 a 8.1 Service Pack 2 permiten a atacantes obtener el nombre de usuario y contraseña para arrancar el servidor accediendo directamente a ciertos métodos internos.
CVSS
- Versión: 2.0
- Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
- Puntuación base: 7.2
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.39%
- Percentil entre todas las CVEs puntuadas: 31
- Fecha de la puntuación: 8/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
- http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp
- http://secunia.com/advisories/11359
- http://securitytracker.com/id?1009766
- http://www.kb.cert.org/vuls/id/352110
- http://www.osvdb.org/5296
- http://www.securityfocus.com/bid/10133
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15865
- http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp
- http://secunia.com/advisories/11359
- http://securitytracker.com/id?1009766
- http://www.kb.cert.org/vuls/id/352110
- http://www.osvdb.org/5296
- http://www.securityfocus.com/bid/10133
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15865
JSON original (NVD)
Mostrar
{
"id": "CVE-2004-0652",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.2,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": true,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2004-08-06T04:00:00.000",
"references": [
{
"url": "http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/11359",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1009766",
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/352110",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/5296",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/10133",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15865",
"source": "cve@mitre.org"
},
{
"url": "http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/11359",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1009766",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/352110",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/5296",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/10133",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15865",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods."
},
{
"lang": "es",
"value": "BEA WebLogic Server y WebLogic Express 7.0 a 7.0 Service Pack 4, y 8.1 a 8.1 Service Pack 2 permiten a atacantes obtener el nombre de usuario y contraseña para arrancar el servidor accediendo directamente a ciertos métodos internos."
}
],
"lastModified": "2026-06-16T22:06:05.790",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9C5AFCF-79D8-4005-B800-B0C6BD461276"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBDF3AC0-0680-4EEE-898C-47D194667BE2"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6828CE4B-91E8-4688-977F-DC7BC21131C8"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9CD2BB36-AC0B-48E9-91E1-A4465896E87A"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FB8930F-C6D8-40B9-8D08-751F5B47229B"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5C59B80-279B-45B3-9CC1-5A263681025B"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "893D9D88-43C4-4F9F-A364-0585DE6FA9E9"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D59F9859-7344-43F0-9348-E57FABB9E431"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2D05BAB-AB3B-466E-8301-01A41644DE77"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D34E2925-DE2A-437F-B349-BD7103F4C37E"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A4EC87D-EF83-48C5-B516-A6A482D9F525"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "935F28E3-9799-4EF6-AB83-62E9C214DD0D"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:express:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25C711BB-E7E0-41D8-985E-5DD386C54637"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:win32:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38EFE72C-10E5-4EED-B016-D914FA52DE6F"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32E8797D-1B62-4480-A79D-0345E65699E8"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:express:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "071FAD20-D502-4634-852A-4CD06FE8E114"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:win32:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97E6F518-D320-4655-B698-2D1A82CA3EDA"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FC1486C-6AC4-44F7-9015-40FD4A341C38"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:express:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB5909DB-B2E2-4358-9D45-C225C6B02360"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:win32:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04C3F96B-A1FF-4E3E-B059-366E176E5E19"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5485722F-5DE4-4CD4-865F-32585537F523"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:express:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCB01060-2C29-4F75-8D0A-74F62E9F0A17"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CCEDE54-97F3-457A-9886-5BD91C9AED2B"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:express:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2269D44C-65EA-4ED0-9F03-A32AC5D44EEE"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E08D4CEA-9ACC-4869-BC87-3524A059914F"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3DFE048-905E-4890-809D-F6BCEF7F83C9"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F5B2A06-CE19-4A57-9566-09FC1E259CDB"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7560131-A6AC-4BBB-AA2D-C7C63AB51226"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D18E22CC-A0FC-4BC7-AD39-2645F57486C1"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "893C2387-03E3-4F8E-9029-BC64C64239EF"
},
{
"criteria": "cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D00633D1-4B38-48D9-B5CD-E8D66EA90599"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}