CVE-2007-0434

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-01-23 · updated 2026-06-16

Description

BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2 does not properly set the severity level of audit events when the system load is high, which might make it easier for attackers to avoid detection.

Affected products

Bea Aqualogic Enterprise Security: 2.0, 2.0-sp1, 2.0-sp2, 2.1, 2.1-sp1, 2.2

References

http://dev2dev.bea.com/pub/advisory/220
http://osvdb.org/32860
http://secunia.com/advisories/23786
http://www.securityfocus.com/bid/22082
http://dev2dev.bea.com/pub/advisory/220
http://osvdb.org/32860
http://secunia.com/advisories/23786
http://www.securityfocus.com/bid/22082

Get alerted when CVE-2007-0434 or the next vulnerability affects your stack