Unscored CVE-2007-0417 EUVD-2007-0417GHSA-fhv9-698w-m6mq

BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows …

Published Jan 23, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows attackers to execute certain EJB container persistence operations with an administrative identity.

References

38511 vdb-entry
1017525 vdb-entry
23750 third-party-advisory
22082 vdb-entry
ADV-2007-0213 vdb-entry
BEA07-144.00 vendor-advisory