{"id":"CVE-2007-0434","aliases":["EUVD-2007-0434","GHSA-2323-w4gh-8p33"],"status":"published","title":"BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not...","description":"BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection.","severity":{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00341,"percentile":0.27755,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2007-01-23T02:00:00Z","modified":"2026-06-16T22:35:33Z","products":[{"vendor":"bea","product":"aqualogic_enterprise_security"}],"references":[{"url":"http://www.securityfocus.com/bid/22082","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://dev2dev.bea.com/pub/advisory/220","tags":["vendor-advisory","x_refsource_BEA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23786","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://osvdb.org/32860","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0434"},{"url":"https://github.com/advisories/GHSA-2323-w4gh-8p33"}],"sources":{"cve":[{"id":"CVE-2007-0434","description":"BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection.","status":"published","published":"2007-01-23T02:00:00Z","modified":"2024-08-07T12:19:30.17Z","updated_at":"2026-11-02T13:34:26.24368Z"}],"euvd":[{"id":"EUVD-2007-0434","description":"BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection.","status":"published","published":"2007-01-23T02:00:00Z","modified":"2024-08-07T12:19:30Z","updated_at":"2026-11-03T01:38:30.634408Z"}],"ghsa":[{"id":"GHSA-2323-w4gh-8p33","title":"BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not...","description":"BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection.","status":"published","published":"2022-05-01T17:44:13Z","modified":"2023-01-31T05:03:29Z","updated_at":"2026-11-02T14:48:28.814324Z"}],"nvd":[{"id":"CVE-2007-0434","description":"BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection.","status":"published","published":"2007-01-23T02:28:00Z","modified":"2026-06-16T22:35:33.757Z","cvss":[{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:11.752648Z"}]}}