Unscored severity · published Dec 1, 2007
CVE-2007-6197
The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows remote attackers to obtain version numbers and internal hostnames by reading comments…
–
CVSS
1.6%
EPSS
No
On KEV
Description
The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows remote attackers to obtain version numbers and internal hostnames by reading comments in the HTML source of any page.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aqualogic Interaction · Bea
5.0.2; 5.0.3; 5.0.4; 6.0.1.218452 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6197
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6197
Exploit
http://procheckup.com/Vulnerability_PR06-08.php
Exploit
http://procheckup.com/Vulnerability_PR06-09.php
Patch
http://secunia.com/advisories/27840
www.securityfocus.com
http://www.securityfocus.com/archive/1/484467/100/0/threaded
www.securitytracker.com
http://www.securitytracker.com/id?1019005
www.vupen.com
http://www.vupen.com/english/advisories/2007/4040
More from Aqualogic Interaction
–
CVE-2007-6198
portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searches for usernames, which allows remote…