CVE-2007-2705

Published: May 16, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when "deployed in an exploded format," allows remote attackers to list a WebLogic Workshop Directory (wlwdir) parent directory via unspecified vectors.

Affected (6)

Products: Bea: Weblogic Integration, Weblogic Workshop

Bea

2 products

Weblogic Integration

Weblogic Workshop

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Bea Weblogic Integration	Version 9.2
Bea Weblogic Workshop	Version 8.1 sp2
Bea Weblogic Workshop	Version 8.1 sp3
Bea Weblogic Workshop	Version 8.1 sp4
Bea Weblogic Workshop	Version 8.1 sp5
Bea Weblogic Workshop	Version 8.1 sp6