Vulnerability in BEA Weblogic Server
CVE-2006-2461
BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic.
EPSS: 0.021 (79.8th percentile) — read the EPSS interpretation.
Affected products
- Bea Weblogic_server — versions 8.1
- N/a — versions n/a
References
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (Patch, vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (vendor-advisory, x_refsource_BEA, Patch, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)