CVE-2006-2471

Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including (1) DNS and IP addresses to address to T3 clients, (2) internal sensitive information using GetIORServlet, (3) certain "server details" in exceptions when invalid XML is provided, and (4) a stack trace in a SOAP fault.

• http://dev2dev.bea.com/pub/advisory/187Patch, Vendor Advisory
• http://secunia.com/advisories/20130Patch, Vendor Advisory
• http://securitytracker.com/id?1016096
• http://www.vupen.com/english/advisories/2006/1828
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26465
• http://dev2dev.bea.com/pub/advisory/187Patch, Vendor Advisory
• http://secunia.com/advisories/20130Patch, Vendor Advisory
• http://securitytracker.com/id?1016096
• http://www.vupen.com/english/advisories/2006/1828
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26465

Published

May 19, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2465Buffer overflow in MP3Info 0.8.4 allows attackers to execute…
• CVE-2006-2466BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 allows r…
• CVE-2006-2467BEA WebLogic Server 8.1 up to SP4, 7.0 up to SP6, and 6.1 up…
• CVE-2006-2468The WebLogic Server Administration Console in BEA WebLogic S…
• CVE-2006-2469The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5,…
• CVE-2006-2470Unspecified vulnerability in the WebLogic Server Administrat…
• CVE-2006-2472Unspecified vulnerability in BEA WebLogic Server 9.1 and 9.0…
• CVE-2006-2473Cross-site scripting (XSS) vulnerability in ow.asp in OpenWi…
• CVE-2006-2474SQL injection vulnerability in lshop.cgi in Cosmoshop 8.11.1…
• CVE-2006-2475Directory traversal vulnerability in (1) edit_mailtexte.cgi …
• CVE-2006-2476Bitrix Site Manager 4.1.x stores updater.log under the web d…
• CVE-2006-2477Cross-site scripting (XSS) vulnerability in the administrati…