CVE-2007-2697

EPSS 2.22%
Veröffentlicht 16.05.2007 01:19:00
Zuletzt bearbeitet 16.06.2026 22:40:08
Erkennungen
Login

The embedded LDAP server in BEA WebLogic Express and WebLogic Server 7.0 through SP6, 8.1 through SP5, 9.0, and 9.1, when in certain configurations, does not limit or audit failed authentication attempts, which allows remote attackers to more easily conduct brute-force attacks against the administrator password, or flood the server with login attempts and cause a denial of service.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

NVD 33 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Bea ≫ Weblogic Server Version 7.0

Bea ≫ Weblogic Server Version 7.0 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp1

Bea ≫ Weblogic Server Version 7.0 Update sp1 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp2

Bea ≫ Weblogic Server Version 7.0 Update sp2 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp3

Bea ≫ Weblogic Server Version 7.0 Update sp3 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp4

Bea ≫ Weblogic Server Version 7.0 Update sp4 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp5

Bea ≫ Weblogic Server Version 7.0 Update sp5 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp6

Bea ≫ Weblogic Server Version 7.0 Update sp6 Edition express

Bea ≫ Weblogic Server Version 7.0 Update sp7 Edition express

Bea ≫ Weblogic Server Version 8.1

Bea ≫ Weblogic Server Version 8.1 Edition express

Bea ≫ Weblogic Server Version 8.1 Update sp1

Bea ≫ Weblogic Server Version 8.1 Update sp1 Edition express

Bea ≫ Weblogic Server Version 8.1 Update sp2

Bea ≫ Weblogic Server Version 8.1 Update sp2 Edition express

Bea ≫ Weblogic Server Version 8.1 Update sp3

Bea ≫ Weblogic Server Version 8.1 Update sp3 Edition express

Bea ≫ Weblogic Server Version 8.1 Update sp4

Bea ≫ Weblogic Server Version 8.1 Update sp4 Edition express

Bea ≫ Weblogic Server Version 8.1 Update sp5

Bea ≫ Weblogic Server Version 8.1 Update sp5 Edition express

Bea ≫ Weblogic Server Version 9.0

Bea ≫ Weblogic Server Version 9.0 Edition express

Bea ≫ Weblogic Server Version 9.0 Update ga

Bea ≫ Weblogic Server Version 9.1

Bea ≫ Weblogic Server Version 9.1 Edition express

Bea ≫ Weblogic Server Version 9.1 Update ga

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.22%	0.804

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.1	4.9	6.4	AV:N/AC:H/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/25284

http://www.vupen.com/english/advisories/2007/1815

http://securitytracker.com/id?1018057

http://dev2dev.bea.com/pub/advisory/229

Patch

Vendor Advisory

http://osvdb.org/36072

https://exchange.xforce.ibmcloud.com/vulnerabilities/34291

https://nvd.nist.gov/vuln/detail/CVE-2007-2697

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2697

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2697

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2007-2697