7.5 High
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.008 Low
EPSS
Percentile
82.0%
Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when “deployed in an exploded format,” allows remote attackers to list a WebLogic Workshop Directory (wlwdir) parent directory via unspecified vectors.
CPE | Name | Operator | Version |
---|---|---|---|
bea:weblogic_workshop | bea weblogic workshop | eq | 8.1 |
bea:weblogic_integration | bea weblogic integration | eq | 9.2 |