CVSS: 4.9EPSS: 0%CPEs: 44EXPL: 0CVE-2006-2472
https://notcve.org/view.php?id=CVE-2006-2472
Unspecified vulnerability in BEA WebLogic Server 9.1 and 9.0, 8.1 through SP5, 7.0 through SP6, and 6.1 through SP7 allows untrusted applications to obtain private server keys. • http://dev2dev.bea.com/pub/advisory/186 http://secunia.com/advisories/20130 http://securitytracker.com/id?1016095 http://www.vupen.com/english/advisories/2006/1828 https://exchange.xforce.ibmcloud.com/vulnerabilities/26466 •
CVSS: 4.0EPSS: 0%CPEs: 10EXPL: 0CVE-2006-2468
https://notcve.org/view.php?id=CVE-2006-2468
The WebLogic Server Administration Console in BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 displays the domain name in the Console login form, which allows remote attackers to obtain sensitive information. • http://dev2dev.bea.com/pub/advisory/190 http://secunia.com/advisories/20130 http://securitytracker.com/id?1016097 http://securitytracker.com/id?1016099 http://www.vupen.com/english/advisories/2006/1828 https://exchange.xforce.ibmcloud.com/vulnerabilities/26468 •
CVSS: 5.0EPSS: 2%CPEs: 36EXPL: 0CVE-2006-1352
https://notcve.org/view.php?id=CVE-2006-1352
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via crafted non-canonicalized XML documents. • http://dev2dev.bea.com/pub/advisory/183 http://secunia.com/advisories/19310 http://securitytracker.com/id?1015790 http://www.securityfocus.com/bid/17167 http://www.vupen.com/english/advisories/2006/1021 https://exchange.xforce.ibmcloud.com/vulnerabilities/25348 •
CVSS: 5.0EPSS: 0%CPEs: 20EXPL: 0CVE-2006-0420
https://notcve.org/view.php?id=CVE-2006-0420
BEA WebLogic Server and WebLogic Express 8.1 through SP4 and 7.0 through SP6 does not properly handle when servlets use relative forwarding, which allows remote attackers to cause a denial of service (slowdown) via unknown attack vectors that cause "looping stack overflow errors." • http://dev2dev.bea.com/pub/advisory/164 http://securitytracker.com/id?1015528 •
CVSS: 6.4EPSS: 2%CPEs: 33EXPL: 0CVE-2006-0422
https://notcve.org/view.php?id=CVE-2006-0422
Multiple unspecified vulnerabilities in BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allow remote attackers to access MBean attributes or cause an unspecified denial of service via unknown attack vectors. • http://dev2dev.bea.com/pub/advisory/166 http://secunia.com/advisories/18592 http://securitytracker.com/id?1015528 http://www.securityfocus.com/bid/16358 http://www.vupen.com/english/advisories/2006/0313 https://exchange.xforce.ibmcloud.com/vulnerabilities/24294 •