7.8

CVE-2007-2705

Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when "deployed in an exploded format," allows remote attackers to list a WebLogic Workshop Directory (wlwdir) parent directory via unspecified vectors.

Data is provided by the National Vulnerability Database (NVD)
BeaWeblogic Integration Version9.2
BeaWeblogic Workshop Version8.1 Updatesp2
BeaWeblogic Workshop Version8.1 Updatesp3
BeaWeblogic Workshop Version8.1 Updatesp4
BeaWeblogic Workshop Version8.1 Updatesp5
BeaWeblogic Workshop Version8.1 Updatesp6
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.43% 0.615
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:C/I:N/A:N