CVE-2007-6384

EPSS 1.68%
Veröffentlicht 15.12.2007 02:46:00
Zuletzt bearbeitet 16.06.2026 22:47:57
Erkennungen
Login

Unspecified vulnerability in the Image Converter functionality in BEA WebLogic Mobility Server 3.3, 3.5, and 3.6 through 3.6 SP1 allows remote attackers to obtain application file and resource access via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 9

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Bea ≫ Weblogic Mobility Server Version 3.3

Bea ≫ Weblogic Mobility Server Version 3.5

Bea ≫ Weblogic Mobility Server Version 3.6

Bea ≫ Weblogic Mobility Server Version 3.6 Update sp1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.68%	0.739

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://dev2dev.bea.com/pub/advisory/255

Vendor Advisory

http://osvdb.org/41880

http://secunia.com/advisories/28078

Patch

Vendor Advisory

http://www.securitytracker.com/id?1019091

Patch

http://www.vupen.com/english/advisories/2007/4204

https://exchange.xforce.ibmcloud.com/vulnerabilities/39005

https://nvd.nist.gov/vuln/detail/CVE-2007-6384

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-6384

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-6384

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2007-6384