CVE-2007-0417 BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows attackers to execute certain EJB container persistence operat...
HighCVSS 10.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows attackers to execute certain EJB container persistence operations with an administrative identity.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bea weblogic server | <= 7.0 | No fix listed |
| bea weblogic server | = 7.0 | No fix listed |
| bea weblogic server | = 8.1 | No fix listed |
| bea weblogic server | = 8.1-sp5 | No fix listed |
| bea weblogic server | = 9.0 | No fix listed |
| bea weblogic server | = 9.1 | No fix listed |
References
- BEA07-144.00 patch vendor-advisory
- 38511 vdb-entry
- 23750 third-party-advisory
- 1017525 vdb-entry
- 22082 vdb-entry
- ADV-2007-0213 vdb-entry