CVE-2006-0425

Published: Jan 25, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors.

Affected (4)

Products: Oracle: Weblogic Portal

1 product

Weblogic Portal

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Oracle Weblogic Portal	Version 8.1
Oracle Weblogic Portal	Version 8.1 sp1
Oracle Weblogic Portal	Version 8.1 sp2
Oracle Weblogic Portal	Version 8.1 sp3

References (12)

http://dev2dev.bea.com/pub/advisory/169

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/18593

Source: cve@mitre.org

http://securitytracker.com/id?1015528

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/16358

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0312

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24297

Source: cve@mitre.org

http://dev2dev.bea.com/pub/advisory/169

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/18593

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015528

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/16358

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/0312

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/24297

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.