Security Advisory

CVE-2007-0418

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2007-01-23 00:00:00

Last updated 2024-08-07 12:19:29

Assigner mitre

State PUBLISHED

Description

BEA WebLogic Server 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1 does not enforce a security policy that declares permissions for EJB methods that have array parameters, which allows remote attackers to obtain unauthorized access to these methods.

← Browse all CVEs View on cve.org ↗