VulnerabilityModified
CVE-2006-0429
BEA WebLogic Server and WebLogic Express 9.0 causes new security providers to appear active even if they have not been activated by a server reboot, which could cause an administrator to perform inappropriate, security-relevant actions.
LOW 2.1EPSS 0.36%
Does this matter?
Lower severity and a low EPSS score (0.36%). Track it; it rarely justifies an emergency change on its own.
Description
BEA WebLogic Server and WebLogic Express 9.0 causes new security providers to appear active even if they have not been activated by a server reboot, which could cause an administrator to perform inappropriate, security-relevant actions.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 0.36% probability · 29th percentile
- CISA KEV
- Not listed
- Affected
- bea/weblogic server
- Source
- cve@mitre.org
References
- http://dev2dev.bea.com/pub/advisory/173Patch, Vendor Advisory
- http://secunia.com/advisories/18592Patch, Vendor Advisory
- http://securitytracker.com/id?1015528Patch
- http://www.osvdb.org/22773
- http://www.securityfocus.com/bid/16358
- http://www.vupen.com/english/advisories/2006/0313
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24298
- http://dev2dev.bea.com/pub/advisory/173Patch, Vendor Advisory
- http://secunia.com/advisories/18592Patch, Vendor Advisory
- http://securitytracker.com/id?1015528Patch
- http://www.osvdb.org/22773
- http://www.securityfocus.com/bid/16358
- http://www.vupen.com/english/advisories/2006/0313
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24298
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.