← Database

CVE-2007-0416

HIGH CVSS: 7.5 Published: 2007-01-23 Modified: 2026-06-16

Description

The WSEE runtime (WS-Security runtime) in BEA WebLogic Server 9.0 and 9.1 does not verify credentials when decrypting client messages, which allows remote attackers to bypass application security.

Affected Platforms

Bea Weblogic Server

Weakness Type

NVD-CWE-Other

References