CVE-2006-0427 — Weblogic Server vulnerability

3 documents3 sources
Severity
2.1LOWNVD
EPSS
0.1%
top 76.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
BEA Weblogic Server
Timeline
PublishedJan 25
Latest updateMay 1

Description

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5 allows malicious EJBs or servlet applications to decrypt system passwords, possibly by accessing functionality that should have been restricted.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

▶NVDbea/weblogic_server8.1, 9.0+1

Patches

Patch: dev2dev.bea.com ↗Patch: secunia.com ↗Patch: securitytracker.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-qf43-6j3j-65q7: Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9↗2022-05-01
▶
CVEList
CVE-2006-0427: Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9↗2006-01-25
▶