CVEvulnerability
CVE-2006-2470
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-05-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies.
Affected configurations
• bea weblogic server 9.0
References
- http://dev2dev.bea.com/pub/advisory/188 Patch, Vendor Advisory
- http://secunia.com/advisories/20130 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2006/1828 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26464 exchange.xforce.ibmcloud.com
- http://dev2dev.bea.com/pub/advisory/188 Patch, Vendor Advisory
- http://secunia.com/advisories/20130 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2006/1828 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26464 exchange.xforce.ibmcloud.com