AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2007-0415

MEDIUM · CVSS 5 EPSS 1.26%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-01-23 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2007-0415
Severity
MEDIUM
CVSS
5
EPSS
1.26%

Original Filing — NVD Description

BEA WebLogic Server 8.1 through 8.1 SP5 does not properly enforce access control after a dynamic update and dynamic redeployment of an application that is implemented through exploded jars, which allows attackers to bypass intended access restrictions.