BEA » Aqualogic Service Bus : Security Vulnerabilities, CVEs, CVSS score >= 5
Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2, when using Active Directory LDAP for authentication, allows remote authenticated users to access the server even after the account has been disabled.
Max CVSS
6.5
EPSS Score
0.36%
Published
2007-01-23
Updated
2008-11-13
BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy service, which might allow remote attackers to bypass authorization policies and route requests to back-end services or conduct other unauthorized activities.
Max CVSS
7.5
EPSS Score
2.15%
Published
2007-01-23
Updated
2008-11-13
2 vulnerabilities found