CVE-2006-2470 — Weblogic Server vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.5%
top 33.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
BEA Weblogic Server
Timeline
PublishedMay 19
Latest updateMay 1

Description

Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: dev2dev.bea.com ↗Patch: secunia.com ↗Patch: dev2dev.bea.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-242w-4wxg-327r: Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9↗2022-05-01
▶
CVEList
CVE-2006-2470: Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9↗2006-05-19
▶
CVE-2006-2470 — BEA Weblogic Server vulnerability | cvebase