HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2007-4618

CVSS 7.8v2.0pub. 2007-08-31upd. 2026-04-23

Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7 allows remote attackers to cause a denial of service (disk consumption) via certain malformed HTTP headers.

CVSS Vector
AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Bea Weblogic Server

    APP
    Bea
    6.06.17.0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2005-1744CRITICAL9.8PL ✓same product

BEA WebLogic Server: brak wylogowania użytkowników przy redeploymencie aplikacji

CVE-2008-3257HIGH10.0same product

Stack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly BEA WebLogic ...

CVE-2008-0901HIGH7.1same product

BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guess...

CVE-2008-0897HIGH7.9same product

Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "r...

CVE-2007-4617HIGH7.8same product

Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold thro...