CVE-2007-0412: Bea WebLogic Server

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP7, and 8.1 through 8.1 SP5 allows remote attackers to read arbitrary files inside the class-path property via .ear or exploded .ear files that use the manifest class-path property to point to utility jar files.

Affected products

• Bea WebLogic Server: version 6.1 only; version 7.0 only; version 8.1 only

Published 2007-01-23. Last modified 2026-06-16.