CVE-2006-2471

no score yetEPSS 1.4%

bea weblogic server: no CVSS score yet. EPSS 1.4% chance of exploitation in the next 30 days.

Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including (1) DNS and IP addresses to address to T3 clients, (2) internal sensitive information using GetIORServlet, (3) certain "server details" in exceptions when invalid XML is provided, and (4) a stack trace in a SOAP fault.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
Published: 2006-05-19
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

bea:weblogic_server

References

http://dev2dev.bea.com/pub/advisory/187
http://secunia.com/advisories/20130
http://securitytracker.com/id?1016096
http://www.vupen.com/english/advisories/2006/1828
https://exchange.xforce.ibmcloud.com/vulnerabilities/26465

Check your stack JSON