CVE-2006-1352: Bea WebLogic Server

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via crafted non-canonicalized XML documents.

Affected products

• Bea WebLogic Server: version 6.1 only; version 7.0 only; version 8.1 only

Published 2006-03-22. Last modified 2026-06-16.