CVE-2006-2470: Bea WebLogic Server

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies.

Affected products

• Bea WebLogic Server: version 9.0 only

Published 2006-05-19. Last modified 2026-06-16.