6.8

CVE-2007-4613

SSL libraries in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP5 might allow remote attackers to obtain plaintext from an SSL stream via a man-in-the-middle attack that injects crafted data and measures the elapsed time before an error response, a different vulnerability than CVE-2006-2461.

Data is provided by the National Vulnerability Database (NVD)
Bea ≫ Weblogic Server Version6.0
Bea ≫ Weblogic Server Version6.1 Updatesp1
Bea ≫ Weblogic Server Version6.1 Updatesp2
Bea ≫ Weblogic Server Version6.1 Updatesp3
Bea ≫ Weblogic Server Version6.1 Updatesp4
Bea ≫ Weblogic Server Version6.1 Updatesp5
Bea ≫ Weblogic Server Version6.1 Updatesp6
Bea ≫ Weblogic Server Version6.1 Updatesp7
Bea ≫ Weblogic Server Version7.0
Bea ≫ Weblogic Server Version7.0 Updatesp1
Bea ≫ Weblogic Server Version7.0 Updatesp2
Bea ≫ Weblogic Server Version7.0 Updatesp3
Bea ≫ Weblogic Server Version7.0 Updatesp4
Bea ≫ Weblogic Server Version7.0 Updatesp5
Bea ≫ Weblogic Server Version7.0 Updatesp6
Bea ≫ Weblogic Server Version7.0 Updatesp7
Bea ≫ Weblogic Server Version8.1
Bea ≫ Weblogic Server Version8.1 Updatesp1
Bea ≫ Weblogic Server Version8.1 Updatesp2
Bea ≫ Weblogic Server Version8.1 Updatesp3
Bea ≫ Weblogic Server Version8.1 Updatesp4
Bea ≫ Weblogic Server Version8.1 Updatesp5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.65% 0.701
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
http://www.securityfocus.com/bid/22082
Patch
Third Party Advisory
VDB Entry