CVE-2007-2699

🗓️ 16 May 2007 01:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 111 Views🌐 WEB

The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 allows remote admin users to upload arbitrary files

Reporter	Title	Published	Views	Family All 9
0day.today	Oracle Application Testing Suite WebLogic Server Administration Console War Deployment Exploit	28 May 201900:00	–	zdt
Circl	CVE-2007-2699	6 Feb 202503:13	–	circl
Cvelist	CVE-2007-2699	16 May 200701:00	–	cvelist
Exploit DB	Oracle Application Testing Suite - WebLogic Server Administration Console War Deployment (Metasploit)	29 May 201900:00	–	exploitdb
EUVD	EUVD-2007-2691	7 Oct 202500:30	–	euvd
Metasploit	Oracle Application Testing Suite WebLogic Server Administration Console War Deployment	10 May 201918:27	–	metasploit
NVD	CVE-2007-2699	16 May 200701:19	–	nvd
Packet Storm	Oracle Application Testing Suite WebLogic Server Administration Console War Deployment	24 May 201900:00	–	packetstorm
Prion	Design/Logic Flaw	16 May 200701:19	–	prion

NVD

Node

bea weblogic_serverMatch9.0

bea weblogic_serverMatch9.0express

bea weblogic_serverMatch9.1

bea weblogic_serverMatch9.1express

Source	Link
secunia	www.secunia.com/advisories/25284
securitytracker	www.securitytracker.com/id
packetstormsecurity	www.packetstormsecurity.com/files/153072/Oracle-Application-Testing-Suite-WebLogic-Server-Administration-Console-War-Deployment.html
vupen	www.vupen.com/english/advisories/2007/1815
dev2dev	www.dev2dev.bea.com/pub/advisory/231
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/34289
osvdb	www.osvdb.org/36069

Parameter	Position	Path	Description
j_username	path	console/j_security_check	Login submission endpoint that authenticates the user; credentials are supplied to obtain a valid admin session.
j_password	path	console/j_security_check	Login submission endpoint that authenticates the user; credentials are supplied to obtain a valid admin session.
j_character_encoding	path	console/j_security_check	Login submission endpoint that authenticates the user; credentials are supplied to obtain a valid admin session.
AppApplicationInstallPortlet_actionOverride	path	console/console.portal	Portal used to manage app deployment; multiple actions (upload, select, finish) are performed here to install a WAR via the admin console.
AppApplicationInstallPortletselectedAppPath	path	console/console.portal	Portal used to manage app deployment; multiple actions (upload, select, finish) are performed here to install a WAR via the admin console.
AppApplicationInstallPortletfrsc	path	console/console.portal	Portal used to manage app deployment; multiple actions (upload, select, finish) are performed here to install a WAR via the admin console.
AppApplicationInstallPortletuploadPlanPath	path	console/console.portal	Portal used to manage app deployment; multiple actions (upload, select, finish) are performed here to install a WAR via the admin console.
AppApplicationInstallPortletuploadAppPath	path	console/console.portal	Portal used to manage app deployment; multiple actions (upload, select, finish) are performed here to install a WAR via the admin console.
AppApplicationUninstallPortletreturnTo	path	console/console.portal	Portal used to manage app deployment; multiple actions (upload, select, finish) are performed here to install a WAR via the admin console.
AppDeploymentsControlPortlethandle	path	console/console.portal	Portal used to manage app deployment; multiple actions (upload, select, finish) are performed here to install a WAR via the admin console.

16 Jun 2026 22:40Current

6.8Medium risk

Vulners AI Score6.8

CVSS 27.1

EPSS0.30876