Unscored severity · published May 16, 2007
CVE-2007-2705
Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when "deployed in an exploded…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when "deployed in an exploded format," allows remote attackers to list a WebLogic Workshop Directory (wlwdir) parent directory via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Weblogic Integration · Bea
9.2 · source: NVD
WW
Weblogic Workshop · Bea
8.1; 8.1; 8.1; 8.1; 8.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2705
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2705
Patch
http://dev2dev.bea.com/pub/advisory/239
osvdb.org
http://osvdb.org/36063
www.securitytracker.com
http://www.securitytracker.com/id?1018059
www.vupen.com
http://www.vupen.com/english/advisories/2007/1815
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/34281
More from Weblogic Integration
–
CVE-2007-5576
BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain…
–
CVE-2003-0733
Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers…
–
CVE-2002-2142
An undocumented extension for the Servlet mappings in the Servlet 2.3 specification, when upgrading to WebLogic Server and Express 7.0 Service Pack 1 from BEA WebLogic Server and…