CVE-2006-2471

Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including…

published May 19, 2006

CVSS
—
EPSS
1%
Percentile
72.1
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including (1) DNS and IP addresses to address to T3 clients, (2) internal sensitive information using GetIORServlet, (3) certain "server details" in exceptions when invalid XML is provided, and (4) a stack trace in a SOAP fault.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01392 · 72.1th percentile
Published
2006-05-19T10:00Z
EPSS history
Timeline
  • 19 MAY 10:00Z
    Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including…
    cvelistv5