CVEvulnerability
CVE-2007-6384
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-12-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
Unspecified vulnerability in the Image Converter functionality in BEA WebLogic Mobility Server 3.3, 3.5, and 3.6 through 3.6 SP1 allows remote attackers to obtain application file and resource access via unspecified vectors.
Affected configurations
• bea weblogic mobility server 3.3
• bea weblogic mobility server 3.5
• bea weblogic mobility server 3.6
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://dev2dev.bea.com/pub/advisory/255 Vendor Advisory
- http://osvdb.org/41880 osvdb.org
- http://secunia.com/advisories/28078 Patch, Vendor Advisory
- http://www.securitytracker.com/id?1019091 Patch
- http://www.vupen.com/english/advisories/2007/4204 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39005 exchange.xforce.ibmcloud.com
- http://dev2dev.bea.com/pub/advisory/255 Vendor Advisory
- http://osvdb.org/41880 osvdb.org
- http://secunia.com/advisories/28078 Patch, Vendor Advisory
- http://www.securitytracker.com/id?1019091 Patch
- http://www.vupen.com/english/advisories/2007/4204 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39005 exchange.xforce.ibmcloud.com