CVE-2006-2471

EPSS 1.39%
Veröffentlicht 19.05.2006 10:02:00
Zuletzt bearbeitet 16.06.2026 22:25:04
Erkennungen
Login

Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including (1) DNS and IP addresses to address to T3 clients, (2) internal sensitive information using GetIORServlet, (3) certain "server details" in exceptions when invalid XML is provided, and (4) a stack trace in a SOAP fault.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 40 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Bea ≫ Weblogic Server Version 6.1

Bea ≫ Weblogic Server Version 6.1 Edition express

Bea ≫ Weblogic Server Version 6.1 Update sp1

Bea ≫ Weblogic Server Version 6.1 Update sp1 Edition express

Bea ≫ Weblogic Server Version 6.1 Update sp2

Bea ≫ Weblogic Server Version 6.1 Update sp2 Edition express

Bea ≫ Weblogic Server Version 6.1 Update sp3

Bea ≫ Weblogic Server Version 6.1 Update sp3 Edition express

Bea ≫ Weblogic Server Version 6.1 Update sp4

Bea ≫ Weblogic Server Version 6.1 Update sp4 Edition express

Bea ≫ Weblogic Server Version 6.1 Update sp5

Bea ≫ Weblogic Server Version 6.1 Update sp5 Edition express

Bea ≫ Weblogic Server Version 6.1 Update sp6

Bea ≫ Weblogic Server Version 6.1 Update sp6 Edition express

Bea ≫ Weblogic Server Version 6.1 Update sp7

Bea ≫ Weblogic Server Version 6.1 Update sp7 Edition express

Bea ≫ Weblogic Server Version 7.0

Bea ≫ Weblogic Server Version 7.0 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp1

Bea ≫ Weblogic Server Version 7.0 Update sp1 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp2

Bea ≫ Weblogic Server Version 7.0 Update sp2 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp3

Bea ≫ Weblogic Server Version 7.0 Update sp3 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp4

Bea ≫ Weblogic Server Version 7.0 Update sp4 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp5

Bea ≫ Weblogic Server Version 7.0 Update sp5 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp6

Bea ≫ Weblogic Server Version 7.0 Update sp6 Edition express

Bea ≫ Weblogic Server Version 8.1

Bea ≫ Weblogic Server Version 8.1 Edition express

Bea ≫ Weblogic Server Version 8.1 Update sp1

Bea ≫ Weblogic Server Version 8.1 Update sp1 Edition express

Bea ≫ Weblogic Server Version 8.1 Update sp2

Bea ≫ Weblogic Server Version 8.1 Update sp2 Edition express

Bea ≫ Weblogic Server Version 8.1 Update sp3

Bea ≫ Weblogic Server Version 8.1 Update sp3 Edition express

Bea ≫ Weblogic Server Version 8.1 Update sp4

Bea ≫ Weblogic Server Version 8.1 Update sp4 Edition express

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.39%	0.688

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/20130

Patch

Vendor Advisory

http://www.vupen.com/english/advisories/2006/1828

http://dev2dev.bea.com/pub/advisory/187

Patch

Vendor Advisory

http://securitytracker.com/id?1016096

https://exchange.xforce.ibmcloud.com/vulnerabilities/26465

https://nvd.nist.gov/vuln/detail/CVE-2006-2471

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-2471

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-2471

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2006-2471