CVE-2006-2461

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-19 · updated 2026-06-16

Description

BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic.

Affected products

Bea Weblogic Server: 8.1, 8.1-sp1, 8.1-sp2, 8.1-sp3

References

http://dev2dev.bea.com/pub/advisory/194
http://secunia.com/advisories/20130
http://securitytracker.com/id?1016102
http://www.vupen.com/english/advisories/2006/1828
https://exchange.xforce.ibmcloud.com/vulnerabilities/26459
http://dev2dev.bea.com/pub/advisory/194
http://secunia.com/advisories/20130
http://securitytracker.com/id?1016102
http://www.vupen.com/english/advisories/2006/1828
https://exchange.xforce.ibmcloud.com/vulnerabilities/26459

Get alerted when CVE-2006-2461 or the next vulnerability affects your stack