CVE-2007-0434
UnknownEPSS 0.31%
Last modified
CVE-2007-0434 is a vulnerability of currently unknown severity. BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection.. EPSS estimates a 0.31% chance of exploitation in the next 30 days.
Description
BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Bea | Aqualogic Enterprise Security | 2.0 |
| Bea | Aqualogic Enterprise Security | 2.1 |
| Bea | Aqualogic Enterprise Security | 2.2 |
References
- http://dev2dev.bea.com/pub/advisory/220Vendor Advisory
- http://secunia.com/advisories/23786Vendor Advisory
- http://dev2dev.bea.com/pub/advisory/220Vendor Advisory
- http://secunia.com/advisories/23786Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-0434?
BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection.
How severe is CVE-2007-0434?
Severity scoring for CVE-2007-0434 is pending analysis. The EPSS model estimates a 0.31% probability of exploitation in the next 30 days.
How do I fix CVE-2007-0434?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-0428Unspecified vulnerability in the chtbl_lookup function in ha…
- CVE-2007-0429DivXBrowserPlugin (aka DivX Web Player) npdivx32.dll, as dis…
- CVE-2007-0430The shared_region_map_file_np function in Apple Mac OS X 10.…
- CVE-2007-0431AVM Fritz!Box 7050, and possibly other product models, allow…
- CVE-2007-0432BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properl…
- CVE-2007-0433Unspecified vulnerability in BEA AquaLogic Enterprise Securi…
- CVE-2007-0435T-Com Speedport 500V routers with firmware 1.31 allow remote…
- CVE-2007-0436Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Ins…
- CVE-2007-0437Multiple cross-site scripting (XSS) vulnerabilities in the s…
- CVE-2007-0441Unspecified vulnerability in HP OpenView Network Node Manage…
- CVE-2007-0442Unspecified vulnerability in IBM OS/400 R530 and R535 has un…
- CVE-2007-0443Multiple buffer overflows in the CDDBControl ActiveX control…
Are you affected by CVE-2007-0434?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST