CVE-2006-0424

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-01-25 · updated 2026-06-16

Description

BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allows remote authenticated guest users to read the server log and obtain sensitive configuration information.

Affected products

Bea Weblogic Server: 6.1-sp1, 6.1-sp2, 6.1-sp3, 6.1-sp4, 6.1-sp5, 6.1-sp6 (+11)

References

http://dev2dev.bea.com/pub/advisory/168
http://secunia.com/advisories/18592
http://securitytracker.com/id?1015528
http://www.osvdb.org/22776
http://www.securityfocus.com/bid/16358
http://www.vupen.com/english/advisories/2006/0313
https://exchange.xforce.ibmcloud.com/vulnerabilities/24295
http://dev2dev.bea.com/pub/advisory/168
http://secunia.com/advisories/18592
http://securitytracker.com/id?1015528
http://www.osvdb.org/22776
http://www.securityfocus.com/bid/16358

Get alerted when CVE-2006-0424 or the next vulnerability affects your stack