CVE-2006-0422

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-01-25 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allow remote attackers to access MBean attributes or cause an unspecified denial of service via unknown attack vectors.

Affected products

Bea Weblogic Server: 6.1-sp1, 6.1-sp2, 6.1-sp3, 6.1-sp4, 6.1-sp5, 6.1-sp6 (+11)

References

http://dev2dev.bea.com/pub/advisory/166
http://secunia.com/advisories/18592
http://securitytracker.com/id?1015528
http://www.securityfocus.com/bid/16358
http://www.vupen.com/english/advisories/2006/0313
https://exchange.xforce.ibmcloud.com/vulnerabilities/24294
http://dev2dev.bea.com/pub/advisory/166
http://secunia.com/advisories/18592
http://securitytracker.com/id?1015528
http://www.securityfocus.com/bid/16358
http://www.vupen.com/english/advisories/2006/0313
https://exchange.xforce.ibmcloud.com/vulnerabilities/24294

Get alerted when CVE-2006-0422 or the next vulnerability affects your stack