6.4

CVE-2007-4615

The SSL client implementation in BEA WebLogic Server 7.0 SP7, 8.1 SP2 through SP6, 9.0, 9.1, 9.2 Gold through MP2, and 10.0 sometimes selects the null cipher when others are available, which might allow remote attackers to intercept communications.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bea ≫ Weblogic Server Update mp2 Version <= 9.2
Bea ≫ Weblogic Server Version 7.0 Update sp7
Bea ≫ Weblogic Server Version 8.1 Update sp2
Bea ≫ Weblogic Server Version 8.1 Update sp3
Bea ≫ Weblogic Server Version 8.1 Update sp4
Bea ≫ Weblogic Server Version 8.1 Update sp5
Bea ≫ Weblogic Server Version 8.1 Update sp6
Bea ≫ Weblogic Server Version 9.0
Bea ≫ Weblogic Server Version 9.1
Bea ≫ Weblogic Server Version 10.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.13% 0.796
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://dev2dev.bea.com/pub/advisory/244
http://secunia.com/advisories/26539
Patch
Vendor Advisory
http://securitytracker.com/id?1018619
http://www.securityfocus.com/bid/25472
http://www.vupen.com/english/advisories/2007/3008
https://exchange.xforce.ibmcloud.com/vulnerabilities/36322