CVE-2007-0417

Published: Jan 23, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows attackers to execute certain EJB container persistence operations with an administrative identity.

Affected (6)

Products: Bea: Weblogic Server

1 product

Weblogic Server

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Server	Up to 7.0
Bea Weblogic Server	Version 7.0
Bea Weblogic Server	Version 8.1
Bea Weblogic Server	Version 8.1 sp5
Bea Weblogic Server	Version 9.0
Bea Weblogic Server	Version 9.1

References (12)

http://dev2dev.bea.com/pub/advisory/211

Source: cve@mitre.org

PatchVendor Advisory

http://osvdb.org/38511

Source: cve@mitre.org

http://secunia.com/advisories/23750

Source: cve@mitre.org

http://securitytracker.com/id?1017525

Source: cve@mitre.org

http://www.securityfocus.com/bid/22082

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0213

Source: cve@mitre.org

http://dev2dev.bea.com/pub/advisory/211

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://osvdb.org/38511

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/23750

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1017525

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/22082

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/0213

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.