CVE-2007-0421: Bea WebLogic Server

Medium severity, CVSS 6.4. EPSS: 2.1% chance of exploitation in the next 30 days.

BEA WebLogic Server 6.1 through 6.1 SP7, and 7.0 through 7.0 SP7 allows remote attackers to cause a denial of service (disk consumption) via requests containing malformed headers, which cause a large amount of data to be written to the server log.

Affected products

• Bea WebLogic Server: version 6.1 only; version 7.0 only

Published 2007-01-23. Last modified 2026-06-16.