CVE-2007-0409

LOW · CVSS 1.5 EPSS 0.28%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-01-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2007-0409

Severity

LOW

CVSS

1.5

EPSS

0.28%

Original NVD Description

BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt passwords stored in the JDBCDataSourceFactory MBean Properties, which allows local administrative users to read the cleartext password.