CVE-2007-6509 : Unspecified vulnerability in Appian Enterprise Business Process Management (BPM)

Unspecified vulnerability in Appian Enterprise Business Process Management (BPM) Suite 5.6 SP1 allows remote attackers to cause a denial of service via a crafted packet to port 5400/tcp.

Published 2007-12-21 19:46:00

Updated 2017-08-08 01:29:12

Source MITRE

View at NVD, CVE.org

Vulnerability category: Input validationDenial of service

Products affected by CVE-2007-6509

Appian » Business Process Management Suite » Version: 5.6 Update SP1
cpe:2.3:a:appian:business_process_management_suite:5.6:sp1:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-6509

EPSS FAQ

83.66%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2007-6509

Appian Enterprise Business Suite 5.6 SP1 DoS

Disclosure Date: 2007-12-17

First seen: 2020-04-26

auxiliary/dos/windows/appian/appian_bpm

This module exploits a denial of service flaw in the Appian Enterprise Business Suite service. Authors: - guiness.stout <guinness.stout@gmail.com>

More information

CVSS scores for CVE-2007-6509

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

CWE ids for CVE-2007-6509

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-6509

Jump to