Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 23/01/2007 Updated: 17/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

BEA WebLogic Server 6.1 up to and including 6.1 SP7, 7.0 up to and including 7.0 SP7, and 8.1 up to and including 8.1 SP5 allows remote malicious users to read arbitrary files inside the class-path property via .ear or exploded .ear files that use the manifest class-path property to point to utility jar files.

Vulnerable Product	Search on Vulmon	Subscribe to Product
bea weblogic server 6.1
bea weblogic server 7.0
bea weblogic server 8.1

NVD-CWE-Other http://dev2dev.bea.com/pub/advisory/206 http://securitytracker.com/id?1017525 http://secunia.com/advisories/23750 http://www.securityfocus.com/bid/22082 http://osvdb.org/38505 http://www.vupen.com/english/advisories/2007/0213 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-0412

Vulnerability Summary

References

Vulmon Search

About

Products

Connect