CVE-2007-0416

2007-01-2300:00:00

mitre

www.cve.org

6.7 Medium

AI Score

Confidence

Low

0.271 Low

EPSS

Percentile

96.8%

JSON

The WSEE runtime (WS-Security runtime) in BEA WebLogic Server 9.0 and 9.1 does not verify credentials when decrypting client messages, which allows remote attackers to bypass application security.

References

dev2dev.bea.com/pub/advisory/210

osvdb.org/38510

secunia.com/advisories/23750

securitytracker.com/id?1017525

www.securityfocus.com/bid/22082

www.vupen.com/english/advisories/2007/0213