CVE-2006-2469

HIGH · CVSS 7.5 EPSS 1.33%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-05-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2006-2469

Severity

HIGH

CVSS

7.5

EPSS

1.33%

Original NVD Description

The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7 stores the username and password in cleartext in the WebLogic Server log when access to a web application or protected JWS fails, which allows attackers to gain privileges.