Vulnerability Details : CVE-2007-4618

Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7 allows remote attackers to cause a denial of service (disk consumption) via certain malformed HTTP headers.

Vulnerability category: Denial of service

Published 2007-08-31 00:17:00

Updated 2018-10-26 14:02:58

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2007-4618

Probability of exploitation activity in the next 30 days: 0.94%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 81 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2007-4618

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	[email protected]
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

CWE ids for CVE-2007-4618

CWE-399

Assigned by: [email protected] (Primary)

References for CVE-2007-4618

http://dev2dev.bea.com/pub/advisory/247

Vendor Advisory
http://www.securityfocus.com/bid/22082

Patch;Third Party Advisory;VDB Entry

CVEs referencing this url
http://www.vupen.com/english/advisories/2007/3008

Third Party Advisory

CVEs referencing this url
https://exchange.xforce.ibmcloud.com/vulnerabilities/36321

Third Party Advisory;VDB Entry

Products affected by CVE-2007-4618

BEA » Weblogic Server » Version: 6.1 Update SP1
cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.0
cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP3
cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP2
cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0
cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP2
cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP4
cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP1
cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP3
cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP6
cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP5
cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP5
cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP4
cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP6
cpe:2.3:a:bea:weblogic_server:7.0:sp6:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 6.1 Update SP7
cpe:2.3:a:bea:weblogic_server:6.1:sp7:*:*:*:*:*:*
Matching versions
BEA » Weblogic Server » Version: 7.0 Update SP7
cpe:2.3:a:bea:weblogic_server:7.0:sp7:*:*:*:*:*:*
Matching versions