CVE-2006-2467: Bea WebLogic Server

Medium severity, CVSS 4.0. EPSS: 1.2% chance of exploitation in the next 30 days.

BEA WebLogic Server 8.1 up to SP4, 7.0 up to SP6, and 6.1 up to SP7 displays the internal IP address of the WebLogic server in the WebLogic Server Administration Console, which allows remote authenticated administrators to determine the address.

Affected products

• Bea WebLogic Server: version 6.1 only; version 7.0 only; version 8.1 only

Published 2006-05-19. Last modified 2026-06-16.