Unrated severityNVD Advisory· Published Jan 23, 2007· Updated Apr 23, 2026
CVE-2007-0432
CVE-2007-0432
Description
BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy service, which might allow remote attackers to bypass authorization policies and route requests to back-end services or conduct other unauthorized activities.
Affected products
3cpe:2.3:a:bea:aqualogic_service_bus:2.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:bea:aqualogic_service_bus:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:bea:aqualogic_service_bus:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:bea:aqualogic_service_bus:2.5:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- dev2dev.bea.com/pub/advisory/224nvdVendor Advisory
- secunia.com/advisories/23786nvdVendor Advisory
- securitytracker.com/idnvdVendor Advisory
- osvdb.org/32862nvd
- www.securityfocus.com/bid/22082nvd
News mentions
0No linked articles in our index yet.