CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2007-2694

Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0 GA, and 9.1 GA allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 58.7%

CVSS Severity

CVSS v2 Score 4.3

References

http://dev2dev.bea.com/pub/advisory/232
http://osvdb.org/36075
http://secunia.com/advisories/25284
http://www.vupen.com/english/advisories/2007/1815
http://dev2dev.bea.com/pub/advisory/232
http://osvdb.org/36075
http://secunia.com/advisories/25284
http://www.vupen.com/english/advisories/2007/1815

Products affected by CVE-2007-2694

Bea » Weblogic Server » Version: 6.1

cpe:2.3:a:bea:weblogic_server:6.1
Bea » Weblogic Server » Version: 7.0

cpe:2.3:a:bea:weblogic_server:7.0
Bea » Weblogic Server » Version: 8.1

cpe:2.3:a:bea:weblogic_server:8.1
Bea » Weblogic Server » Version: 9.0

cpe:2.3:a:bea:weblogic_server:9.0
Bea » Weblogic Server » Version: 9.1

cpe:2.3:a:bea:weblogic_server:9.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-2694

Products

Pricing

Contact Us