CVE-2007-2705 json
Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through…
published 2007-05-16 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-2697
- cvss
- 7.8
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.7%
- EPSS 1.7% chance of exploitation in 30 days, percentile 77%
- public exploits
- 0
- none known
Summary
Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Workshop 8.1 SP2 through SP6, when "deployed in an exploded format," allows remote attackers to list a WebLogic Workshop Directory (wlwdir) parent directory via unspecified vectors.
Patch / fix
- dev2dev.bea.com/pub/advisory/239 advisory
Exploit prediction
1.74% chance of exploitation in the next 30 days, higher than 77% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.8 | AV:N/AC:L/Au:N/C:C/I:N/A:N |
References
-
dev2dev.bea.com
/pub/advisory/239
vendor-advisory, patch
-
securitytracker.com
/id?1018059
vdb-entry
-
osvdb.org
/36063
vdb-entry
-
vupen.com
/english/advisories/2007/1815
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/34281
vdb-entry
Sources
- CVE List CVE-2007-2705
- NVD CVE-2007-2705
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.