CVE-2007-2699: bea weblogic_server

EPSS trend

Probability

29.30%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 29.30% on 21-09-2026

21-09-202621-10-2026

EPSS score

29.30%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

7 links

dev2dev.bea.com/pub/advisory/231Vendor AdvisoryX Refsource BEAPatch
osvdb.org/36069VDB EntryX Refsource OSVDB
exchange.xforce.ibmcloud.com/vulnerabilities/34289VDB EntryX Refsource XF
securitytracker.com/id?1018057VDB EntryX Refsource SECTRACKPatch
secunia.com/advisories/25284Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2007/1815VDB EntryX Refsource VUPEN
packetstormsecurity.com/files/…X Refsource MISC

Related vulnerabilities

CVE-2003-1438beaweblogic_server0.70%19y ago23-10-2007 01:00Race condition in BEA WebLogic Server and Express 5.1 through 7.0.0.1, when using in-memory session replication or replicated stateful session beans, causes the same buffer to be provided to two users, which could allow one user to see session data that was intended for another user.CVE-2003-1290beaweblogic_server2.37%20y ago13-01-2006 11:00BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enabled, allows remote attackers to obtain configuration information by accessing MBeanHome via the Java Naming and Directory Interface (JNDI).CVE-2003-0622beatuxedo+11.76%22y ago05-11-2003 05:00The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service (hang) via pathname arguments that contain MS-DOS device names such as CON and AUX.CVE-2003-0621beatuxedo+18.05%22y ago05-11-2003 05:00The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument.CVE-2003-0623beatuxedo+11.46%22y ago05-11-2003 05:00Cross-site scripting (XSS) vulnerability in the Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to inject arbitrary web script via the INIFILE argument.CVE-2003-0151beaweblogic_server3.95%23y ago21-03-2003 05:00BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that perform administrative functions, which allows remote attackers to read arbitrary files or execute arbitrary code.

All vulnerabilities inweblogic_server

CVE-2007-2699: bea weblogic_server

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References