CVE-2008-0904: Bea Systems Aqualogic Interaction

High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attackers to read arbitrary files via a crafted URL.

Affected products

• Bea Systems Aqualogic Interaction: version 4.2 only; version 4.2_mp1 only
• Bea Systems Plumtree Collaboration: version 4.1 only; version 4.1_sp1 only; version 4.1_sp2 only

Published 2008-02-22. Last modified 2026-06-16.