CVE-2006-0427: Bea WebLogic Server

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5 allows malicious EJBs or servlet applications to decrypt system passwords, possibly by accessing functionality that should have been restricted.

Affected products

• Bea WebLogic Server: version 8.1 only; version 9.0 only

Published 2006-01-25. Last modified 2026-06-16.