Unscored severity · published Dec 15, 2007
CVE-2007-6384
Unspecified vulnerability in the Image Converter functionality in BEA WebLogic Mobility Server 3.3, 3.5, and 3.6 through 3.6 SP1 allows remote attackers to obtain application file…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Image Converter functionality in BEA WebLogic Mobility Server 3.3, 3.5, and 3.6 through 3.6 SP1 allows remote attackers to obtain application file and resource access via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WM
Weblogic Mobility Server · Bea
3.3; 3.5; 3.6; 3.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6384
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6384
Vendor Advisory
http://dev2dev.bea.com/pub/advisory/255
osvdb.org
http://osvdb.org/41880
Patch
http://secunia.com/advisories/28078
Patch
http://www.securitytracker.com/id?1019091
www.vupen.com
http://www.vupen.com/english/advisories/2007/4204
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/39005