TI-2008-00868 CVE-2008-0904 · GHSA-qfgr-q8f7-r48hUnspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1…Priority LOW 37Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attackers to read arbitrary files via a crafted URL.CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01471 · Published 2008-02-22 · No fix listed CWE-200