Critical severity9.8NVD Advisory· Published May 24, 2005· Updated Apr 16, 2026

CVE-2005-1744

Description

BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without having to log in again, which may be in violation of newly changed security constraints or role mappings.

Affected products

Bea/Weblogic Server
cpe:2.3:a:bea:weblogic_server:*:*:*:*:*:*:*:*
Range: <=7.0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/15486nvdBroken LinkVendor Advisory
securitytracker.com/idnvdBroken LinkThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/13717nvdBroken LinkThird Party AdvisoryVDB Entry
dev2dev.bea.com/pub/advisory/127nvdProduct
www.vupen.com/english/advisories/2005/0604nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000