CVE-2007-2699: High severity Bea WebLogic Server vulnerability
The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policies, which allows remote administrative users in the Deployer role to upload arbitrary files.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2699?
CVE-2007-2699 is considered a high severity vulnerability due to its potential to allow remote users to upload arbitrary files.
How do I fix CVE-2007-2699?
To fix CVE-2007-2699, upgrade to a patched version of BEA WebLogic Server 9.2 or later.
Who is affected by CVE-2007-2699?
CVE-2007-2699 affects users of BEA WebLogic Server and WebLogic Express versions 9.0 and 9.1.
What types of attacks can be executed using CVE-2007-2699?
An attacker can exploit CVE-2007-2699 to upload arbitrary files, potentially allowing unauthorized access or data manipulation.
Is authentication required to exploit CVE-2007-2699?
Yes, the attacker must be a remote administrative user with the Deployer role to exploit CVE-2007-2699.