CVE-2007-2701

MEDIUM 4.6CVE-2007-2701 · Published 16/05/2007 · updated 16/06/2026

In short

CVE-2007-2701 is a MEDIUM (CVSS 4.6) vulnerability affecting weblogic server (bea).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
weblogic server bea	`= 7.0= 8.1`	No fix yet

Description

The JMS Message Bridge in BEA WebLogic Server 7.0 through SP7 and 8.1 through Service Pack 6, when configured without a username and password, or when the connection URL is not defined, allows remote attackers to bypass the security access policy and "send unauthorized messages to a protected queue."

References

dev2dev.bea.com/pub/advisory/234 · Patch
osvdb.org/36067
secunia.com/advisories/25284 · Vendor Advisory
securitytracker.com/id · Patch
vupen.com/english/advisories/2007/1815
exchange.xforce.ibmcloud.com/vulnerabilities/34287

More vulnerabilities in weblogic server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

weblogic server

bea

= 7.0= 8.1

No fix yet

Description

More vulnerabilities in weblogic server

See all →