Unscored severity · published Jan 23, 2007
CVE-2007-0425
Unspecified vulnerability in BEA WebLogic Platform and Server 8.1 through 8.1 SP5, and JRockit 1.4.2 R4.5 and earlier, allows attackers to gain privileges via unspecified vectors,…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in BEA WebLogic Platform and Server 8.1 through 8.1 SP5, and JRockit 1.4.2 R4.5 and earlier, allows attackers to gain privileges via unspecified vectors, related to an "overflow condition," probably a buffer overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JR
Jrockit · Bea
through 1.4.2 · source: NVD
WS
Weblogic Server · Bea
through 8.1; 8.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0425
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0425
Vendor Advisory
http://dev2dev.bea.com/pub/advisory/222
osvdb.org
http://osvdb.org/38515
Vendor Advisory
http://secunia.com/advisories/23750
securitytracker.com
http://securitytracker.com/id?1017525
www.vupen.com
http://www.vupen.com/english/advisories/2007/0213