CVE-2006-1352: Medium severity Bea WebLogic Server vulnerability
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via crafted non-canonicalized XML documents.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1352?
CVE-2006-1352 is classified as a denial of service vulnerability that can lead to memory exhaustion.
How do I fix CVE-2006-1352?
To mitigate CVE-2006-1352, upgrade to a later version of BEA WebLogic Server that is not affected by this vulnerability.
What versions of WebLogic Server are affected by CVE-2006-1352?
CVE-2006-1352 affects BEA WebLogic Server versions 6.1 SP7 and earlier, 7.0 SP6 and earlier, and 8.1 SP4 and earlier.
Can CVE-2006-1352 be exploited remotely?
Yes, CVE-2006-1352 can be exploited remotely by attackers using crafted non-canonicalized XML documents.
What consequences can I expect if I am vulnerable to CVE-2006-1352?
If vulnerable to CVE-2006-1352, your WebLogic Server could experience a denial of service, resulting in downtime.