CVE-2006-0422 : Multiple unspecified vulnerabilities in BEA WebLogic Server and WebLogic Express

Multiple unspecified vulnerabilities in BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allow remote attackers to access MBean attributes or cause an unspecified denial of service via unknown attack vectors.

Published 2006-01-25 23:07:00

Updated 2025-04-03 01:03:51

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2006-0422

BEA » Weblogic Server » Version: 6.1 Update SP1
cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP1 Express Edition
cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP2 Express Edition
cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP3
cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP3 Express Edition
cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP2
cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP1 Express Edition
cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP2
cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP4
cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP4 Express Edition
cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP1
cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP2 Express Edition
cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP3 Express Edition
cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP3
cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 8.1 Update SP3
cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 8.1 Update SP3 Express Edition
cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP6
cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP5
cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP5 Express Edition
cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP5
cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 8.1 Update SP2
cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 8.1 Update SP4 Express Edition
cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP5 Express Edition
cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 8.1 Update SP2 Express Edition
cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP4
cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP4 Express Edition
cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 8.1 Update SP1
cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 8.1 Update SP1 Express Edition
cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 8.1 Update SP4
cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP6
cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP7
cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP7 Express Edition
cpe:2.3:a:bea:weblogic_server:6.1:sp7:express:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP6 Express Edition
cpe:2.3:a:bea:weblogic_server:7.0:sp6:express:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-0422

EPSS FAQ

0.95%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 74 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-0422

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.4	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:P	10.0	4.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: Partial

References for CVE-2006-0422

http://www.securityfocus.com/bid/16358

CVEs referencing this url
https://exchange.xforce.ibmcloud.com/vulnerabilities/24294
http://securitytracker.com/id?1015528

Patch

CVEs referencing this url
http://dev2dev.bea.com/pub/advisory/166

Patch;Vendor Advisory
http://secunia.com/advisories/18592

Patch;Vendor Advisory

CVEs referencing this url
http://www.vupen.com/english/advisories/2006/0313

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2006-0422

Products affected by CVE-2006-0422

Exploit prediction scoring system (EPSS) score for CVE-2006-0422

CVSS scores for CVE-2006-0422

References for CVE-2006-0422