VulnerabilityModified
CVE-2007-0412
BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP7, and 8.1 through 8.1 SP5 allows remote attackers to read arbitrary files inside the class-path property via .ear or exploded .ear files that use the manifest class-path property to point to…
MEDIUM 5.0EPSS 1.94%
Does this matter?
Lower severity and a low EPSS score (1.94%). Track it; it rarely justifies an emergency change on its own.
Description
BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP7, and 8.1 through 8.1 SP5 allows remote attackers to read arbitrary files inside the class-path property via .ear or exploded .ear files that use the manifest class-path property to point to utility jar files.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.94% probability · 79th percentile
- CISA KEV
- Not listed
- Affected
- bea/weblogic server
- Source
- cve@mitre.org
References
- http://dev2dev.bea.com/pub/advisory/206Patch, Vendor Advisory
- http://osvdb.org/38505Broken Link
- http://secunia.com/advisories/23750Third Party Advisory
- http://securitytracker.com/id?1017525Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/22082Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2007/0213Third Party Advisory
- http://dev2dev.bea.com/pub/advisory/206Patch, Vendor Advisory
- http://osvdb.org/38505Broken Link
- http://secunia.com/advisories/23750Third Party Advisory
- http://securitytracker.com/id?1017525Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/22082Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2007/0213Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.