cbcvebase.
CVE-2006-0421
published 2006-01-25

CVE-2006-0421: By design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains from the same WebLogic instance on the same machine, allows…

PriorityP414medium4.6CVSS 2.0
AVLACLAuNCPIPAP
EPSS
0.40%
31.7th percentile
By design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains from the same WebLogic instance on the same machine, allows administrators of any created domain to access other created domains, which could allow administrators to gain privileges that were not intended.

Affected

2 ranges
VendorProductVersion rangeFixed in
beaweblogic_server——
beaweblogic_server——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.