CVE-2007-0432: Bea Aqualogic Service Bus

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy service, which might allow remote attackers to bypass authorization policies and route requests to back-end services or conduct other unauthorized activities.

Affected products

• Bea Aqualogic Service Bus: version 2.0 only; version 2.1 only; version 2.5 only

Published 2007-01-23. Last modified 2026-06-16.