CVE-2007-6384

CVSS V2 High 7.5 CVSS V3 None
Description
Unspecified vulnerability in the Image Converter functionality in BEA WebLogic Mobility Server 3.3, 3.5, and 3.6 through 3.6 SP1 allows remote attackers to obtain application file and resource access via unspecified vectors.
Overview
  • CVE ID
  • CVE-2007-6384
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2007-12-15T02:46:00
  • Last Modified Date
  • 2017-08-08T01:29:07
Weakness Enumerations
CWE URL
CWE-287 http://cwe.mitre.org/data/definitions/287.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:bea:weblogic_mobility_server:3.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:bea:weblogic_mobility_server:3.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:bea:weblogic_mobility_server:3.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:bea:weblogic_mobility_server:3.6:sp1:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:P/I:P/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • PARTIAL
  • Base Score
  • 7.5
  • Severity
  • HIGH
  • Exploitability Score
  • 10
  • Impact Score
  • 6.4
References
Reference URL Reference Tags
http://dev2dev.bea.com/pub/advisory/255 Vendor Advisory
http://www.securitytracker.com/id?1019091 Patch
http://secunia.com/advisories/28078 Patch Vendor Advisory
http://osvdb.org/41880
http://www.vupen.com/english/advisories/2007/4204
https://exchange.xforce.ibmcloud.com/vulnerabilities/39005
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2007-6384
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6384
History
Created Old Value New Value Data Type Notes
2022-05-10 09:09:30 Added to TrackCVE