CVE-2007-0412

BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP7, and 8.1 through 8.1 SP5 allows remote attackers to read arbitrary files inside the class-path property via .ear or exploded .ear files that use the manifest class-path property to point to utility jar files.

• http://dev2dev.bea.com/pub/advisory/206Patch, Vendor Advisory
• http://osvdb.org/38505Broken Link
• http://secunia.com/advisories/23750Third Party Advisory
• http://securitytracker.com/id?1017525Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/22082Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/0213Third Party Advisory
• http://dev2dev.bea.com/pub/advisory/206Patch, Vendor Advisory
• http://osvdb.org/38505Broken Link
• http://secunia.com/advisories/23750Third Party Advisory
• http://securitytracker.com/id?1017525Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/22082Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/0213Third Party Advisory

Published

Jan 23, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0406Multiple buffer overflows in the (1) main function in (a) cl…
• CVE-2007-0407Cross-site scripting (XSS) vulnerability in Operation/User.p…
• CVE-2007-0408BEA Weblogic Server 8.1 through 8.1 SP4 does not properly va…
• CVE-2007-0409BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9…
• CVE-2007-0410Unspecified vulnerability in the thread management in BEA We…
• CVE-2007-0411BEA WebLogic Server 8.1 through 8.1 SP5, 9.0, 9.1, and 9.2 G…
• CVE-2007-0413BEA WebLogic Server 8.1 through 8.1 SP5 stores cleartext dat…
• CVE-2007-0414BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP6…
• CVE-2007-0415BEA WebLogic Server 8.1 through 8.1 SP5 does not properly en…
• CVE-2007-0416The WSEE runtime (WS-Security runtime) in BEA WebLogic Serve…
• CVE-2007-0417BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5…
• CVE-2007-0418BEA WebLogic Server 7.0 through 7.0 SP6, 8.1 through 8.1 SP5…