VULNERABILITY INTELLIGENCE

CVE-2006-0432

CVSS score2.1 LOW
EPSS probability0.36%
CISA KEVNot currently listed
Published2006-01-25
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:N

Description

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Administration Console to add custom security policies, causes incorrect policies to be created, which prevents the server from properly protecting JNDI resources.

Primary references