CVEvulnerability
CVE-2007-2699
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-05-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:H/Au:S/C:C/I:C/A:C
Description
The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policies, which allows remote administrative users in the Deployer role to upload arbitrary files.
Affected configurations
• bea weblogic server 9.0
• bea weblogic server 9.1
References
- http://dev2dev.bea.com/pub/advisory/231 Patch, Vendor Advisory
- http://osvdb.org/36069 osvdb.org
- http://packetstormsecurity.com/files/153072/Oracle-Application-Testing-Suite-WebLogic-Server-Administration-Console-War-Deployment.html packetstormsecurity.com
- http://secunia.com/advisories/25284 Vendor Advisory
- http://securitytracker.com/id?1018057 Patch
- http://www.vupen.com/english/advisories/2007/1815 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34289 exchange.xforce.ibmcloud.com
- http://dev2dev.bea.com/pub/advisory/231 Patch, Vendor Advisory
- http://osvdb.org/36069 osvdb.org
- http://packetstormsecurity.com/files/153072/Oracle-Application-Testing-Suite-WebLogic-Server-Administration-Console-War-Deployment.html packetstormsecurity.com
- http://secunia.com/advisories/25284 Vendor Advisory
- http://securitytracker.com/id?1018057 Patch
- http://www.vupen.com/english/advisories/2007/1815 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34289 exchange.xforce.ibmcloud.com