Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2007-4615

The SSL client implementation in BEA WebLogic Server 7.0 SP7, 8.1 SP2 through SP6, 9.0, 9.1, 9.2 Gold through MP2, and 10.0 sometimes selects the null cipher when others are available, which might allow remote attackers to intercept communications.

  • Published: Aug 31, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2007-4615
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.4
  • AV:N/AC:L/Au:N/C:P/I:P/A:N

No CWE or OWASP classifications available.

Software From Fixed in
bea / weblogic_server 7.0-sp7 7.0-sp7.x
bea / weblogic_server 9.0 9.0.x
bea / weblogic_server 8.1-sp5 8.1-sp5.x
bea / weblogic_server 8.1-sp3 8.1-sp3.x
bea / weblogic_server 9.1 9.1.x
bea / weblogic_server 10.0 10.0.x
bea / weblogic_server 8.1-sp2 8.1-sp2.x
bea / weblogic_server - 9.2.x
bea / weblogic_server 8.1-sp6 8.1-sp6.x
bea / weblogic_server 8.1-sp4 8.1-sp4.x