VulnerabilityModified
CVE-2006-0428
Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), allows remote attackers to access restricted web resources via crafted URLs.
HIGH 7.5EPSS 2.91%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.91%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), allows remote attackers to access restricted web resources via crafted URLs.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 2.91% probability · 86th percentile
- CISA KEV
- Not listed
- Affected
- oracle/weblogic portal
- Source
- cve@mitre.org
References
- http://dev2dev.bea.com/pub/advisory/172Patch, Vendor Advisory
- http://secunia.com/advisories/18593
- http://securitytracker.com/id?1015528Patch
- http://www.osvdb.org/22767
- http://www.securityfocus.com/bid/16358
- http://www.vupen.com/english/advisories/2006/0312
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24293
- http://dev2dev.bea.com/pub/advisory/172Patch, Vendor Advisory
- http://secunia.com/advisories/18593
- http://securitytracker.com/id?1015528Patch
- http://www.osvdb.org/22767
- http://www.securityfocus.com/bid/16358
- http://www.vupen.com/english/advisories/2006/0312
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24293
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.