Unscored severity · published Jan 23, 2007
CVE-2007-0434
BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which…
–
CVSS
0.3%
EPSS
No
On KEV
Description
BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AE
Aqualogic Enterprise Security · Bea
2.0; 2.0; 2.0; 2.1; 2.1; 2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0434
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0434
Vendor Advisory
http://dev2dev.bea.com/pub/advisory/220
osvdb.org
http://osvdb.org/32860
Vendor Advisory
http://secunia.com/advisories/23786
www.securityfocus.com
http://www.securityfocus.com/bid/22082