CVE-2007-2699

The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policies, which allows…

published May 16, 2007

CVSS
—
EPSS
29%
Percentile
98.2
In the wild
Unconfirmed
What it is

The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policies, which allows remote administrative users in the Deployer role to upload arbitrary files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.29305 · 98.2th percentile
Published
2007-05-16T01:00Z
EPSS history
Timeline
  • 16 MAY 01:00Z
    The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policies, which allows…
    cvelistv5