CVE-2006-0425: Oracle WebLogic Portal

Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days.

BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors.

Affected products

• Oracle WebLogic Portal: version 8.1 only

Published 2006-01-25. Last modified 2026-06-16.