{"id":"CVE-2007-0417","aliases":["EUVD-2007-0417","GHSA-fhv9-698w-m6mq"],"status":"published","title":"BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the...","description":"BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows attackers to execute certain EJB container persistence operations with an administrative identity.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01839,"percentile":0.79114,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2007-01-23T00:00:00Z","modified":"2026-06-16T22:35:31Z","products":[{"vendor":"bea","product":"weblogic_server"}],"references":[{"url":"http://osvdb.org/38511","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://securitytracker.com/id?1017525","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://secunia.com/advisories/23750","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/22082","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2007/0213","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://dev2dev.bea.com/pub/advisory/211","tags":["vendor-advisory","x_refsource_BEA","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0417"},{"url":"https://github.com/advisories/GHSA-fhv9-698w-m6mq"}],"sources":{"cve":[{"id":"CVE-2007-0417","description":"BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows attackers to execute certain EJB container persistence operations with an administrative identity.","status":"published","published":"2007-01-23T00:00:00Z","modified":"2024-08-07T12:19:29.968Z","updated_at":"2026-11-02T13:34:26.24368Z"}],"euvd":[{"id":"EUVD-2007-0417","description":"BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows attackers to execute certain EJB container persistence operations with an administrative identity.","status":"published","published":"2007-01-23T00:00:00Z","modified":"2024-08-07T12:19:29Z","updated_at":"2026-11-03T01:38:30.634408Z"}],"ghsa":[{"id":"GHSA-fhv9-698w-m6mq","title":"BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the...","description":"BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows attackers to execute certain EJB container persistence operations with an administrative identity.","status":"published","published":"2022-05-01T17:44:09Z","modified":"2023-01-31T05:03:01Z","updated_at":"2026-11-02T14:48:23.185743Z"}],"nvd":[{"id":"CVE-2007-0417","description":"BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows attackers to execute certain EJB container persistence operations with an administrative identity.","status":"published","published":"2007-01-23T00:28:00Z","modified":"2026-06-16T22:35:31.85Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:11.752648Z"}]}}