Unscored severity · published Jan 25, 2006
CVE-2006-0428
Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), allows remote attackers to access restricted web resources…
–
CVSS
2.9%
EPSS
No
On KEV
Description
Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), allows remote attackers to access restricted web resources via crafted URLs.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WP
Weblogic Portal · Oracle
8.1; 8.1; 8.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0428
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0428
Patch
http://dev2dev.bea.com/pub/advisory/172
secunia.com
http://secunia.com/advisories/18593
Patch
http://securitytracker.com/id?1015528
www.osvdb.org
http://www.osvdb.org/22767
www.securityfocus.com
http://www.securityfocus.com/bid/16358
www.vupen.com
http://www.vupen.com/english/advisories/2006/0312
More from Weblogic Portal
–
CVE-2008-0864
Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow…
–
CVE-2008-0868
Cross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 allows remote authenticated users to inject arbitrary web…
–
CVE-2008-0870
BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal Administration Console to an…
–
CVE-2008-0865
Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a floatable WLP portlet via unknown vectors
–
CVE-2007-5576
BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain…