CVE-2007-2700 json
The WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not encrypt certain at…
published 2007-05-16 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-2692
- cvss
- 4.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.7%
- EPSS 1.7% chance of exploitation in 30 days, percentile 77%
- public exploits
- 0
- none known
Summary
The WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not encrypt certain attributes in configuration files when creating a new domain, which allows remote authenticated users to obtain sensitive information.
Exploit prediction
1.75% chance of exploitation in the next 30 days, higher than 77% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.0 | AV:N/AC:L/Au:S/C:P/I:N/A:N |
References
-
dev2dev.bea.com
/pub/advisory/233
vendor-advisory
-
secunia.com
/advisories/25284
third-party-advisory, vendor-advisory
-
securitytracker.com
/id?1018057
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/34288
vdb-entry
-
osvdb.org
/36068
vdb-entry
-
vupen.com
/english/advisories/2007/1815
vdb-entry
Sources
- CVE List CVE-2007-2700
- NVD CVE-2007-2700
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.