What’s Vulnerable › Vulnerabilities

CVE-2006-2464

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-05-19 · updated 2026-06-16

Description

stopWebLogic.sh in BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6 displays the administrator password to stdout when executed, which allows local users to obtain the password by viewing a local display.

Affected products

• Bea Weblogic Server: 7.0, 7.0-sp1, 7.0-sp2, 7.0-sp3, 7.0-sp4, 7.0-sp5 (+4)

References

• http://dev2dev.bea.com/pub/advisory/181
• http://secunia.com/advisories/20130
• http://securitytracker.com/id?1016094
• http://www.vupen.com/english/advisories/2006/1828
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26467
• http://dev2dev.bea.com/pub/advisory/181
• http://secunia.com/advisories/20130
• http://securitytracker.com/id?1016094
• http://www.vupen.com/english/advisories/2006/1828
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26467

Get alerted when CVE-2006-2464 or the next vulnerability affects your stack