CVE-2006-0427
First published: Wed Jan 25 2006(Updated: )
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5 allows malicious EJBs or servlet applications to decrypt system passwords, possibly by accessing functionality that should have been restricted.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| BEA Weblogic Server | =9.0-sp3 | |
| BEA Weblogic Server | =9.0-sp1 | |
| BEA Weblogic Server | =8.1-sp5 | |
| BEA Weblogic Server | =8.1-sp5 | |
| BEA Weblogic Server | =8.1-sp3 | |
| BEA Weblogic Server | =9.0-sp5 | |
| BEA Weblogic Server | =9.0-sp2 | |
| BEA Weblogic Server | =8.1-sp4 | |
| BEA Weblogic Server | =9.0-sp2 | |
| BEA Weblogic Server | =8.1-sp1 | |
| BEA Weblogic Server | =9.0-sp1 | |
| BEA Weblogic Server | =8.1-sp3 | |
| BEA Weblogic Server | =8.1-sp2 | |
| BEA Weblogic Server | =9.0-sp4 | |
| BEA Weblogic Server | =8.1-sp1 | |
| BEA Weblogic Server | =9.0-sp3 | |
| BEA Weblogic Server | =8.1-sp4 | |
| BEA Weblogic Server | =9.0-sp5 | |
| BEA Weblogic Server | =8.1-sp2 | |
| BEA Weblogic Server | =9.0-sp4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/bea
- canonical/bea weblogic server
- version/bea weblogic server/9.0-sp3
- version/bea weblogic server/9.0-sp1
- version/bea weblogic server/8.1-sp5
- version/bea weblogic server/8.1-sp3
- version/bea weblogic server/9.0-sp5
- version/bea weblogic server/9.0-sp2
- version/bea weblogic server/8.1-sp4
- version/bea weblogic server/8.1-sp1
- version/bea weblogic server/8.1-sp2
- version/bea weblogic server/9.0-sp4