CVE-2006-1351 - BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors related to a "default internal servlet" accessed through HTTP

Back Back to CVE browser

MEDIUM

BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors related to a "default internal servlet" accessed through HTTP

Published Mar 22, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 1.53%

Description

BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors related to a "default internal servlet" accessed through HTTP.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://dev2dev.bea.com/pub/advisory/180
vendor-advisoryx_refsource_BEAPatchVendor Advisory
http://secunia.com/advisories/19310
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://securitytracker.com/id?1015792
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/17166
vdb-entryx_refsource_BIDPatch
http://www.vupen.com/english/advisories/2006/1021
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/25347
vdb-entryx_refsource_XF

Link	Providers	Tags
http://dev2dev.bea.com/pub/advisory/180		vendor-advisoryx_refsource_BEAPatchVendor Advisory
http://secunia.com/advisories/19310		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://securitytracker.com/id?1015792		vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/17166		vdb-entryx_refsource_BIDPatch
http://www.vupen.com/english/advisories/2006/1021		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/25347		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 22, 2006

Updated Aug 7, 2024

Reserved Mar 21, 2006

Link CVE-2006-1351

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-1351

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-1351