CVE-2007-6384

Unspecified vulnerability in the Image Converter functionality in BEA WebLogic Mobility Server 3.3, 3.5, and 3.6 through 3.6 SP1 allows remote attackers to obtain application file and resource access via unspecified vectors.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2007-12-15

Last modified

2024-08-07

Weaknesses

CWE-287

Affected products

• Weblogic Mobility Server (Bea)

References

• http://dev2dev.bea.com/pub/advisory/255
• http://osvdb.org/41880
• http://secunia.com/advisories/28078
• http://www.securitytracker.com/id?1019091
• http://www.vupen.com/english/advisories/2007/4204
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39005