CVE-2007-4618 Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7 allows remote attackers to cause a denial of service (disk consumption) via certain malformed HTTP header...
HighCVSS 7.8
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7 allows remote attackers to cause a denial of service (disk consumption) via certain malformed HTTP headers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bea weblogic server | = 6.0 | No fix listed |
| bea weblogic server | = 6.1-sp1 | No fix listed |
| bea weblogic server | = 6.1-sp2 | No fix listed |
| bea weblogic server | = 6.1-sp3 | No fix listed |
| bea weblogic server | = 6.1-sp4 | No fix listed |
| bea weblogic server | = 6.1-sp5 | No fix listed |
| bea weblogic server | = 6.1-sp6 | No fix listed |
| bea weblogic server | = 6.1-sp7 | No fix listed |
| bea weblogic server | = 7.0 | No fix listed |
| bea weblogic server | = 7.0-sp1 | No fix listed |
| bea weblogic server | = 7.0-sp2 | No fix listed |
| bea weblogic server | = 7.0-sp3 | No fix listed |
| bea weblogic server | = 7.0-sp4 | No fix listed |
| bea weblogic server | = 7.0-sp5 | No fix listed |
| bea weblogic server | = 7.0-sp6 | No fix listed |
| bea weblogic server | = 7.0-sp7 | No fix listed |
References
- BEA07-148.01 vendor-advisory
- 38517 broken-link vdb-entry
- 26539 third-party-advisory vendor-advisory
- 22082 patch third-party-advisory vdb-entry
- ADV-2007-3008 third-party-advisory vdb-entry
- weblogic-headers-dos(36321) third-party-advisory vdb-entry