← Back

CVE-2006-0420

nvd nist
Published: Jan 25, 2006Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

BEA WebLogic Server and WebLogic Express 8.1 through SP4 and 7.0 through SP6 does not properly handle when servlets use relative forwarding, which allows remote attackers to cause a denial of service (slowdown) via unknown attack vectors that cause "looping stack overflow errors."

Affected (20)

Products: Bea: Weblogic Server
1 product
Weblogic Server
Configuration A
20 vulnerable
Vulnerable SoftwareAffected Versions
Bea
Version 7.0 sp1
Version 7.0 sp1
Version 7.0 sp2
Version 7.0 sp2
Version 7.0 sp3
Version 7.0 sp3
Version 7.0 sp4
Version 7.0 sp4
Version 7.0 sp5
Version 7.0 sp5
Version 7.0 sp6
Version 7.0 sp6
Version 8.1 sp1
Version 8.1 sp1
Version 8.1 sp2
Version 8.1 sp2
Version 8.1 sp3
Version 8.1 sp3
Version 8.1 sp4
Version 8.1 sp4

References (4)

Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch

Timeline

No history available yet.