VULNERABILITY INTELLIGENCE

CVE-2006-0421

CVSS score4.6 NONE
EPSS probability0.40%
CISA KEVNot currently listed
Published2006-01-25
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

By design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains from the same WebLogic instance on the same machine, allows administrators of any created domain to access other created domains, which could allow administrators to gain privileges that were not intended.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references