CVE-2007-0421

BEA WebLogic Server 6.1 through 6.1 SP7, and 7.0 through 7.0 SP7 allows remote attackers to cause a denial of service (disk consumption) via requests containing malformed headers, which cause a large amount of data to be written to the server log.

• http://dev2dev.bea.com/pub/advisory/215Patch, Vendor Advisory
• http://osvdb.org/32859Broken Link
• http://secunia.com/advisories/23750Third Party Advisory
• http://securitytracker.com/id?1017525Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/22082Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/0213Third Party Advisory
• http://dev2dev.bea.com/pub/advisory/215Patch, Vendor Advisory
• http://osvdb.org/32859Broken Link
• http://secunia.com/advisories/23750Third Party Advisory
• http://securitytracker.com/id?1017525Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/22082Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/0213Third Party Advisory

Published

Jan 23, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0415BEA WebLogic Server 8.1 through 8.1 SP5 does not properly en…
• CVE-2007-0416The WSEE runtime (WS-Security runtime) in BEA WebLogic Serve…
• CVE-2007-0417BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5…
• CVE-2007-0418BEA WebLogic Server 7.0 through 7.0 SP6, 8.1 through 8.1 SP5…
• CVE-2007-0419The BEA WebLogic Server proxy plug-in before June 2006 for t…
• CVE-2007-0420BEA WebLogic Server 9.0, 9.1, and 9.2 Gold allows remote att…
• CVE-2007-0422BEA WebLogic Server 9.0, 9.1, and 9.2 Gold, when running on …
• CVE-2007-0423BEA WebLogic Portal 9.2 does not properly handle when an adm…
• CVE-2007-0424Unspecified vulnerability in the BEA WebLogic Server proxy p…
• CVE-2007-0425Unspecified vulnerability in BEA WebLogic Platform and Serve…
• CVE-2007-0426BEA WebLogic Portal 9.2, when running in a WebLogic Server c…
• CVE-2007-0427Stack-based buffer overflow in Microsoft Help Workshop 4.03.…