Unscored severity · published Feb 22, 2008
CVE-2008-0904
Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attackers to read arbitrary…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attackers to read arbitrary files via a crafted URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Aqualogic Interaction · Bea Systems
4.2; 4.2_mp1 · source: NVD
PC
Plumtree Collaboration · Bea Systems
4.1; 4.1_sp1; 4.1_sp2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0904
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0904
Patch
http://dev2dev.bea.com/pub/advisory/276
osvdb.org
http://osvdb.org/41881
secunia.com
http://secunia.com/advisories/28991
www.securitytracker.com
http://www.securitytracker.com/id?1019437
www.vupen.com
http://www.vupen.com/english/advisories/2008/0607/references
More from Aqualogic Interaction
–
CVE-2008-0867
Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 through SP1 allows remote attackers to inject…