CVE-2007-2705
Severity Score
7.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when "deployed in an exploded format," allows remote attackers to list a WebLogic Workshop Directory (wlwdir) parent directory via unspecified vectors.
Vulnerabilidad de salto de directorio en Test View Console de BEA WebLogic Integration 9.2 anterior a SP1 y WebLogic Workshop 8.1 SP2 hasta SP6, cuando es "desplegado en formato expandido" permite a atacantes remotos listar un directorio padre de WebLogic Workshop Directory (wlwdir) a través de vectores sin especificar.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-05-15 CVE Reserved
- 2007-05-16 CVE Published
- 2024-03-19 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/36063 | Vdb Entry | |
| http://www.securitytracker.com/id?1018059 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2007/1815 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/34281 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://dev2dev.bea.com/pub/advisory/239 | 2017-07-29 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Bea Search vendor "Bea" | Weblogic Integration Search vendor "Bea" for product "Weblogic Integration" | 9.2 Search vendor "Bea" for product "Weblogic Integration" and version "9.2" | - |
Affected
| ||||||
| Bea Search vendor "Bea" | Weblogic Workshop Search vendor "Bea" for product "Weblogic Workshop" | 8.1 Search vendor "Bea" for product "Weblogic Workshop" and version "8.1" | sp2 |
Affected
| ||||||
| Bea Search vendor "Bea" | Weblogic Workshop Search vendor "Bea" for product "Weblogic Workshop" | 8.1 Search vendor "Bea" for product "Weblogic Workshop" and version "8.1" | sp3 |
Affected
| ||||||
| Bea Search vendor "Bea" | Weblogic Workshop Search vendor "Bea" for product "Weblogic Workshop" | 8.1 Search vendor "Bea" for product "Weblogic Workshop" and version "8.1" | sp4 |
Affected
| ||||||
| Bea Search vendor "Bea" | Weblogic Workshop Search vendor "Bea" for product "Weblogic Workshop" | 8.1 Search vendor "Bea" for product "Weblogic Workshop" and version "8.1" | sp5 |
Affected
| ||||||
| Bea Search vendor "Bea" | Weblogic Workshop Search vendor "Bea" for product "Weblogic Workshop" | 8.1 Search vendor "Bea" for product "Weblogic Workshop" and version "8.1" | sp6 |
Affected
| ||||||