CVE-2006-2461: Bea WebLogic Server

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic.

Affected products

• Bea WebLogic Server: version 8.1 only

Published 2006-05-19. Last modified 2026-06-16.