CVE-2007-2704

BEA WebLogic Server <9.3 - DoS

Title source: llm

Description

BEA WebLogic Server 9.0 through 9.2 allows remote attackers to cause a denial of service (SSL port unavailability) by accessing a half-closed SSL socket.

References (6)

[Patch, Vendor Advisory] http://dev2dev.bea.com/pub/advisory/237

[Patch, Vendor Advisory] http://secunia.com/advisories/25284

[Patch] http://securitytracker.com/id?1018057

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/34278

[Third Party Advisory, VDB Entry] http://osvdb.org/36064

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/1815

Scores

EPSS 0.0088

EPSS Percentile 75.1%

Classification

Status draft

Affected Products (3)

bea/weblogic_server

Timeline

Published May 16, 2007

Tracked Since Feb 18, 2026