CVE-2007-2695

The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0, and 9.1, when…

published May 16, 2007

CVSS
—
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0, and 9.1, when SecureProxy is enabled, may process "external requests on behalf of a system identity," which allows remote attackers to access administrative data or functionality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02554 · 84.9th percentile
Published
2007-05-16T01:00Z
EPSS history
Timeline
  • 16 MAY 01:00Z
    The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0, and 9.1, when…
    cvelistv5