CVE-2007-6384

EPSS 0.88%
Veröffentlicht 15.12.2007 02:46:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Unspecified vulnerability in the Image Converter functionality in BEA WebLogic Mobility Server 3.3, 3.5, and 3.6 through 3.6 SP1 allows remote attackers to obtain application file and resource access via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Bea ≫ Weblogic Mobility Server Version3.3

Bea ≫ Weblogic Mobility Server Version3.5

Bea ≫ Weblogic Mobility Server Version3.6

Bea ≫ Weblogic Mobility Server Version3.6 Updatesp1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.88%	0.733

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://dev2dev.bea.com/pub/advisory/255

Vendor Advisory

http://osvdb.org/41880

http://secunia.com/advisories/28078

Patch

Vendor Advisory

http://www.securitytracker.com/id?1019091

Patch

http://www.vupen.com/english/advisories/2007/4204

https://exchange.xforce.ibmcloud.com/vulnerabilities/39005

https://nvd.nist.gov/vuln/detail/CVE-2007-6384

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-6384

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-6384

EUVD