CVE-2006-4136

Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving (1) "SOAP requests and responses", (2) mbean, (3) ThreadIdentitySupport, and possibly others.

• CWE-200
• CWE-264

• http://secunia.com/advisories/21440Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951Patch
• http://www-1.ibm.com/support/search.wss?rs=0&q=PK24334&apar=onlyPatch
• http://www-1.ibm.com/support/search.wss?rs=0&q=PK25199&apar=onlyPatch
• http://www-1.ibm.com/support/search.wss?rs=0&q=PK26498&apar=onlyPatch
• http://www.securityfocus.com/bid/19463Patch
• http://www.vupen.com/english/advisories/2006/3262
• http://secunia.com/advisories/21440Patch, Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951Patch
• http://www-1.ibm.com/support/search.wss?rs=0&q=PK24334&apar=onlyPatch
• http://www-1.ibm.com/support/search.wss?rs=0&q=PK25199&apar=onlyPatch
• http://www-1.ibm.com/support/search.wss?rs=0&q=PK26498&apar=onlyPatch
• http://www.securityfocus.com/bid/19463Patch
• http://www.vupen.com/english/advisories/2006/3262

Published

Aug 14, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4130PHP remote file inclusion vulnerability in admin.remository.…
• CVE-2006-4131Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, a…
• CVE-2006-4132ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0…
• CVE-2006-4133Heap-based buffer overflow in SAP Internet Graphics Service …
• CVE-2006-4134Unspecified vulnerability related to a "design flaw" in SAP …
• CVE-2006-4135PHP remote file inclusion vulnerability in cal_config.inc.ph…
• CVE-2006-4137IBM WebSphere Application Server before 6.1.0.1 allows attac…
• CVE-2006-4138Multiple unspecified vulnerabilities in Microsoft Windows He…
• CVE-2006-4139Race condition in Sun Solaris 10 allows attackers to cause a…
• CVE-2006-4140Directory traversal vulnerability in IPCheck Server Monitor …
• CVE-2006-4141SQL injection vulnerability in news.php in Virtual War (VWar…
• CVE-2006-4142SQL injection vulnerability in extra/online.php in Virtual W…