Bea Aqualogic Service Bus vulnerabilities

2 vulnerabilities

Known vulnerabilities in Bea Aqualogic Service Bus, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2007-0433beaaqualogic_service_bus
EPSS score
1.28%
Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2, when using Active Directory LDAP for authentication, allows remote authenticated users to access the server even after the account has been disabled.7.5CVE-2007-0432beaaqualogic_service_bus
EPSS score
1.48%
BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy service, which might allow remote attackers to bypass authorization policies and route requests to back-end services or conduct other unauthorized activities.