Lucene search

K
nvd[email protected]NVD:CVE-2007-2698
HistoryMay 16, 2007 - 1:19 a.m.

CVE-2007-2698

2007-05-1601:19:00
web.nvd.nist.gov
2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.8%

The Administration Console in BEA WebLogic Server 9.0 may show plaintext Web Service attributes during configuration creation, which allows remote attackers to obtain sensitive credential information.

Affected configurations

NVD
Node
beaweblogic_serverMatch9.0

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.8%

Related for NVD:CVE-2007-2698