Vulnerabilities

TI-2007-05913 CVE-2007-6198 · GHSA-rhh4-95cw-qqvp

portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4…

LOW 33

portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote attackers to enumerate valid usernames vi…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07037 Published 2007-12-01 No fix listed

TI-2007-05912 CVE-2007-6197 · GHSA-rv62-hr8r-jr2p

The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452…

LOW 26

The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows remote attackers to obtain version numbers and internal hostnames by reading comments in the HTML source of any page.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01584 Published 2007-12-01 No fix listed CWE-200

Vulnerabilities

Filters

portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4…

The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452…