CVE-2007-0432

Name: CVE-2007-0432
Creator: NVD / NIST
Published: 2007-01-23T02:28:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.40%

Last modified Jun 16, 2026

CVE-2007-0432 is a vulnerability of currently unknown severity. BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy service, which might allow remote attackers to bypass authorization policies and route requests to back-end services or conduct other unauthorized activities.. EPSS estimates a 1.40% chance of exploitation in the next 30 days.

Description

BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy service, which might allow remote attackers to bypass authorization policies and route requests to back-end services or conduct other unauthorized activities.

Metrics

EPSS Probability

1.40%

69.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Bea	Aqualogic Service Bus	2.0
Bea	Aqualogic Service Bus	2.1
Bea	Aqualogic Service Bus	2.5

References

http://dev2dev.bea.com/pub/advisory/224Vendor Advisory
http://osvdb.org/32862
http://secunia.com/advisories/23786Vendor Advisory
http://securitytracker.com/id?1017523Vendor Advisory
http://www.securityfocus.com/bid/22082
http://dev2dev.bea.com/pub/advisory/224Vendor Advisory
http://osvdb.org/32862
http://secunia.com/advisories/23786Vendor Advisory
http://securitytracker.com/id?1017523Vendor Advisory
http://www.securityfocus.com/bid/22082

Timeline

Published: Jan 23, 2007
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2007-0432?

How severe is CVE-2007-0432?

Severity scoring for CVE-2007-0432 is pending analysis. The EPSS model estimates a 1.40% probability of exploitation in the next 30 days.

How do I fix CVE-2007-0432?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2007-0432?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST