Bea

Records158All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high34CVSS 7.0–8.9

Exploited now

Bea records in CISA KEV

No Bea vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Weblogic Server 149 records CRITICAL Tuxedo 5 records LOW Weblogic Integration 4 records LOW Weblogic Workshop 4 records LOW Aqualogic Interaction 2 records LOW Aqualogic Service Bus 2 records LOW Aqualogic Enterprise Security 1 record LOW Jrockit 1 record LOW

Records

2 records in Aqualogic Service Bus · all components

TI-2007-00422 CVE-2007-0432 · GHSA-wq7v-6qc2-955r

BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request…

LOW 36

BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy service, which might allow remote attackers to bypass authorization policies and route requests to back-end servi…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0148 Published 2007-01-23 No fix listed

TI-2007-00423 CVE-2007-0433 · GHSA-r9cg-9wx9-rrw2

Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1…

LOW 31

Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2, when using Active Directory LDAP for authentication, allows remote authenticated users to access the serve…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01281 Published 2007-01-23 No fix listed

Open these records in search →

Critical	8
High	34
Medium	100
Low	16
No CVSS	0