CVE-2007-0410: Bea WebLogic Server

Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in the thread management in BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, 9.0, and 9.1, when T3 authentication is used, allows remote attackers to cause a denial of service (thread and system hang) via unspecified "sequences of events."

Affected products

• Bea WebLogic Server: version 7.0 only; version 8.1 only; version 9.0 only; version 9.1 only

Published 2007-01-23. Last modified 2026-06-16.