VulnerabilityModified

CVE-2007-0410

Unspecified vulnerability in the thread management in BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1, when T3 authentication is used, allows remote attackers to cause a denial of service (thread and system hang) via unspecified…

MEDIUM 5.0EPSS 2.52%

Does this matter?

Lower severity and a low EPSS score (2.52%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS: 2.52% probability · 84th percentile
CISA KEV: Not listed
Affected: bea/weblogic server
Source: cve@mitre.org

References

http://dev2dev.bea.com/pub/advisory/204Patch, Vendor Advisory
http://osvdb.org/38502Broken Link
http://secunia.com/advisories/23750Third Party Advisory
http://securitytracker.com/id?1017525Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/22082Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/0213Third Party Advisory
http://dev2dev.bea.com/pub/advisory/204Patch, Vendor Advisory
http://osvdb.org/38502Broken Link
http://secunia.com/advisories/23750Third Party Advisory
http://securitytracker.com/id?1017525Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/22082Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/0213Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.