CVE-2006-2470

Published: May 19, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies.

Affected (1)

Products: Bea: Weblogic Server

Bea

1 product

Weblogic Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Server	Version 9.0

References (8)

http://dev2dev.bea.com/pub/advisory/188

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/20130

Source: cve@mitre.org

PatchVendor Advisory

http://www.vupen.com/english/advisories/2006/1828

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26464

Source: cve@mitre.org

http://dev2dev.bea.com/pub/advisory/188

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/20130

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.vupen.com/english/advisories/2006/1828

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/26464

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.