Unscored CVE-2006-1352 EUVD-2006-1356GHSA-wjpf-c9x3-mgg2

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote att…

Published Mar 22, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via crafted non-canonicalized XML documents.

References

BEA06-123.00 vendor-advisory
17167 vdb-entry
weblogic-xml-parser-dos(25348) vdb-entry
1015790 vdb-entry
19310 third-party-advisory
ADV-2006-1021 vdb-entry