CVEvulnerability

CVE-2007-2696

6.8 MEDIUM Published 2007-05-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-05-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

The JMS Server in BEA WebLogic Server 6.1 through SP7, 7.0 through SP6, and 8.1 through SP5 enforces security access policies on the front end, which allows remote attackers to access protected queues via direct requests to the JMS back-end server.

Affected configurations

• bea weblogic server 6.1 • bea weblogic server 7.0 • bea weblogic server 8.1

References