Vulnerability Details CVE-2006-2461
BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.4%
CVSS Severity
CVSS v2 Score 5.0
References
- http://dev2dev.bea.com/pub/advisory/194
- http://secunia.com/advisories/20130
- http://securitytracker.com/id?1016102
- http://www.vupen.com/english/advisories/2006/1828
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26459
- http://dev2dev.bea.com/pub/advisory/194
- http://secunia.com/advisories/20130
- http://securitytracker.com/id?1016102
- http://www.vupen.com/english/advisories/2006/1828
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26459
Products affected by CVE-2006-2461
-
cpe:2.3:a:bea:weblogic_server:8.1