CVE-2006-0432: Bea WebLogic Server

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Administration Console to add custom security policies, causes incorrect policies to be created, which prevents the server from properly protecting JNDI resources.

Affected products

• Bea WebLogic Server: version 9.0 only

Published 2006-01-25. Last modified 2026-06-16.