VulnerabilityModified
CVE-2006-2461
BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive…
MEDIUM 5.0EPSS 2.11%
Does this matter?
Lower severity and a low EPSS score (2.11%). Track it; it rarely justifies an emergency change on its own.
Description
BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 2.11% probability · 81th percentile
- CISA KEV
- Not listed
- Affected
- bea/weblogic server
- Source
- cve@mitre.org
References
- http://dev2dev.bea.com/pub/advisory/194Patch, Vendor Advisory
- http://secunia.com/advisories/20130Patch, Vendor Advisory
- http://securitytracker.com/id?1016102Patch
- http://www.vupen.com/english/advisories/2006/1828
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26459
- http://dev2dev.bea.com/pub/advisory/194Patch, Vendor Advisory
- http://secunia.com/advisories/20130Patch, Vendor Advisory
- http://securitytracker.com/id?1016102Patch
- http://www.vupen.com/english/advisories/2006/1828
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26459
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.