CVE-2007-4614 — Weblogic Server vulnerability

4 documents4 sources
Severity
7.5HIGHNVD
CNA6.8
EPSS
0.4%
top 41.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
BEA Weblogic Server
Timeline
PublishedAug 31
Latest updateMay 1

Description

BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable managed servers, which might allow attackers to bypass intended restrictions, a different vulnerability than CVE-2007-0426.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: dev2dev.bea.com ↗Patch: www.securityfocus.com ↗Patch: dev2dev.bea.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-jqpj-4gh4-6gmj: BEA WebLogic Server 9↗2022-05-01
▶
CVEList
CVE-2007-4614: BEA WebLogic Server 9↗2007-08-31
▶

💥Exploits & PoCs

1
Exploit-DB
PortalApp 4.0 - SQL Injection / Cross-Site Scripting / Authentication Bypass↗2008-01-06
▶
CVE-2007-4614 — BEA Weblogic Server vulnerability | cvebase