Unrated severityNVD Advisory· Published Jan 23, 2007· Updated Jun 16, 2026
CVE-2007-0432
CVE-2007-0432
Description
BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy service, which might allow remote attackers to bypass authorization policies and route requests to back-end services or conduct other unauthorized activities.
Affected products
4cpe:2.3:a:bea:aqualogic_service_bus:2.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:bea:aqualogic_service_bus:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:bea:aqualogic_service_bus:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:bea:aqualogic_service_bus:2.5:*:*:*:*:*:*:*
- (no CPE)range: 2.0, 2.1, 2.5
Patches
Vulnerability mechanics
References
5- dev2dev.bea.com/pub/advisory/224nvdVendor Advisory
- secunia.com/advisories/23786nvdVendor Advisory
- securitytracker.com/idnvdVendor Advisory
- osvdb.org/32862nvd
- www.securityfocus.com/bid/22082nvd
News mentions
0No linked articles in our index yet.