CVE-2007-0417: Bea WebLogic Server

High severity, CVSS 10.0. EPSS: 1.8% chance of exploitation in the next 30 days.

BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows attackers to execute certain EJB container persistence operations with an administrative identity.

Affected products

• Bea WebLogic Server: up to and including 7.0; version 7.0 only; version 8.1 only; version 9.0 only; version 9.1 only

Published 2007-01-23. Last modified 2026-06-16.