NVD

Id
61166  
Name
CVE-2006-2471  
Description
Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including (1) DNS and IP addresses to address to T3 clients, (2) internal sensitive information using GetIORServlet, (3) certain "server details" in exceptions when invalid XML is provided, and (4) a stack trace in a SOAP fault.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-05-19  
Modified Date
2011-03-07  
Seq
2006-2471  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
316130 61166 CVE-2006-2471 BEA06-125.00  View
316131 61166 CVE-2006-2471 1016096  View
316132 61166 CVE-2006-2471 ADV-2006-1828  View
316133 61166 CVE-2006-2471 weblogic-internal-information-disclosure(26465)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58093 JVNDB-2006-000289 BEA WebLogic Server における複数の情報漏洩の脆弱性 ------------ CVE-2006-2471 18573 CVE-2006-2471 61166 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000289.html 2006-05-15 2007-04-01 View