CVE-2007-0420: Bea WebLogic Server

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

BEA WebLogic Server 9.0, 9.1, and 9.2 Gold allows remote attackers to obtain sensitive information via malformed HTTP requests, which reveal data from previous requests.

Affected products

• Bea WebLogic Server: version 9.0 only; version 9.1 only; version 9.2 only

Published 2007-01-23. Last modified 2026-06-16.