CVE-2007-2695

no score yetEPSS 2.6%

bea weblogic server: no CVSS score yet. EPSS 2.6% chance of exploitation in the next 30 days.

The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0, and 9.1, when SecureProxy is enabled, may process "external requests on behalf of a system identity," which allows remote attackers to access administrative data or functionality.

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
Published: 2007-05-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

bea:weblogic_server

References

http://dev2dev.bea.com/pub/advisory/227
http://dev2dev.bea.com/pub/advisory/274
http://osvdb.org/36074
http://secunia.com/advisories/25284
http://secunia.com/advisories/29041

Check your stack JSON