Vulnerability in Bea Weblogic Server
CVE-2006-0420
BEA WebLogic Server and WebLogic Express 8.1 through SP4 and 7.0 through SP6 does not properly handle when servlets use relative forwarding, which allows remote attackers to cause a denial of service (slowdown) via unknown attack vectors that cause "looping stack overflow errors."
EPSS: 0.013 (68.1th percentile) — read the EPSS interpretation.
Affected products
- Bea Weblogic_server — versions 7.0, 8.1
- N/a — versions n/a
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vendor-advisory, x_refsource_BEA, Patch, Vendor Advisory)