CVE-2007-2705 — Path Traversal in Weblogic Integration

3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.6%
top 31.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
BEA Weblogic IntegrationBEA Weblogic Workshop
Timeline
PublishedMay 16
Latest updateMay 1

Description

Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when "deployed in an exploded format," allows remote attackers to list a WebLogic Workshop Directory (wlwdir) parent directory via unspecified vectors.

CVSS vector

AV:N/AC:L/C:C/I:N/A:NExploitability: 10.0 | Impact: 6.9

Affected Packages2 packages

Patches

Patch: dev2dev.bea.com ↗Patch: dev2dev.bea.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-5pvj-vp73-v747: Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9↗2022-05-01
▶
CVEList
CVE-2007-2705: Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9↗2007-05-16
▶
CVE-2007-2705 — Path Traversal in Weblogic Integration | cvebase