CVE-2006-1351

Published: Mar 22, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors related to a "default internal servlet" accessed through HTTP.

Affected (8)

Products: Bea: Weblogic Server

1 product

Weblogic Server

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Server	Version 6.1
Bea Weblogic Server	Version 6.1 sp1
Bea Weblogic Server	Version 6.1 sp2
Bea Weblogic Server	Version 6.1 sp3
Bea Weblogic Server	Version 6.1 sp4
Bea Weblogic Server	Version 6.1 sp5
Bea Weblogic Server	Version 6.1 sp6
Bea Weblogic Server	Version 6.1 sp7

References (12)

http://dev2dev.bea.com/pub/advisory/180

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/19310

Source: cve@mitre.org

PatchVendor Advisory

http://securitytracker.com/id?1015792

Source: cve@mitre.org

http://www.securityfocus.com/bid/17166

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/1021

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25347

Source: cve@mitre.org

http://dev2dev.bea.com/pub/advisory/180

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/19310

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://securitytracker.com/id?1015792

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17166

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2006/1021

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/25347

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.