Unrated severityNVD Advisory· Published May 16, 2007· Updated Jun 16, 2026

CVE-2007-2698

Description

The Administration Console in BEA WebLogic Server 9.0 may show plaintext Web Service attributes during configuration creation, which allows remote attackers to obtain sensitive credential information.

Affected products

Bea/WebLogic Server2 versions
cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:*
- (no CPE)range: 9.0

Patches

Vulnerability mechanics

References

dev2dev.bea.com/pub/advisory/230nvdPatchVendor Advisory
osvdb.org/36071nvd
securitytracker.com/idnvd
www.vupen.com/english/advisories/2007/1815nvd
exchange.xforce.ibmcloud.com/vulnerabilities/34286nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000