7.5

CVE-2007-0418

BEA WebLogic Server 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1 does not enforce a security policy that declares permissions for EJB methods that have array parameters, which allows remote attackers to obtain unauthorized access to these methods.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bea ≫ Weblogic Server Update sp6 Version <= 7.0
Bea ≫ Weblogic Server Update sp5 Version <= 8.1
Bea ≫ Weblogic Server Version 7.0
Bea ≫ Weblogic Server Version 8.1
Bea ≫ Weblogic Server Version 9.0
Bea ≫ Weblogic Server Version 9.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.61% 0.728
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/23750
http://www.securityfocus.com/bid/22082
http://www.vupen.com/english/advisories/2007/0213
http://securitytracker.com/id?1017525
http://dev2dev.bea.com/pub/advisory/212
Patch
Vendor Advisory
http://osvdb.org/38512