7.5
CVE-2006-2469
- EPSS 0.69%
- Published 19.05.2006 10:02:00
- Last modified 03.04.2025 01:03:51
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7 stores the username and password in cleartext in the WebLogic Server log when access to a web application or protected JWS fails, which allows attackers to gain privileges.
Data is provided by the National Vulnerability Database (NVD)
Bea ≫ Weblogic Server Version6.0 Updatesp6
Bea ≫ Weblogic Server Version6.1
Bea ≫ Weblogic Server Version6.1 Updatesp1
Bea ≫ Weblogic Server Version6.1 Updatesp2
Bea ≫ Weblogic Server Version6.1 Updatesp3
Bea ≫ Weblogic Server Version6.1 Updatesp4
Bea ≫ Weblogic Server Version6.1 Updatesp5
Bea ≫ Weblogic Server Version7.0
Bea ≫ Weblogic Server Version7.0 Updatesp1
Bea ≫ Weblogic Server Version7.0 Updatesp2
Bea ≫ Weblogic Server Version7.0 Updatesp3
Bea ≫ Weblogic Server Version7.0 Updatesp4
Bea ≫ Weblogic Server Version7.0 Updatesp5
Bea ≫ Weblogic Server Version8.1
Bea ≫ Weblogic Server Version8.1 Updatesp1
Bea ≫ Weblogic Server Version8.1 Updatesp2
Bea ≫ Weblogic Server Version8.1 Updatesp3
Bea ≫ Weblogic Server Version8.1 Updatesp4
Bea ≫ Weblogic Server Version9.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.69% | 0.695 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|