CVE-2007-2699

None

CVSS

—

EPSS

29.3%

Published

May 16, 2007

CISA due date

—

The record

The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policies, which allows remote administrative users in the Deployer role to upload arbitrary files.

Affected packages

Ecosystem	Package	Introduced	Fixed