CVE-2007-4614: Bea WebLogic Server

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable managed servers, which might allow attackers to bypass intended restrictions, a different vulnerability than CVE-2007-0426.

Affected products

• Bea WebLogic Server: version 9.1 only

Published 2007-08-31. Last modified 2026-06-16.