CVE-2006-0424: Bea WebLogic Server

Medium severity, CVSS 4.0. EPSS: 1.2% chance of exploitation in the next 30 days.

BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allows remote authenticated guest users to read the server log and obtain sensitive configuration information.

Affected products

• Bea WebLogic Server: version 6.1 only; version 7.0 only; version 8.1 only

Published 2006-01-25. Last modified 2026-06-16.