PatchTheCVEaqualogic service bus vulnerabilities and fixes
Recent CVEs affecting aqualogic service bus, with upgrade or downgrade steps. 2 tracked.
Also searched as: aqualogicservicebus.
aqualogic service bus has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-01-23. Highest priority: CVE-2007-0432 (score 45/100).
- CVE-2007-0433 MEDIUM 6.5 DOWNGRADE Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2
- CVE-2007-0432 HIGH 7.5 DOWNGRADE BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy ser
FAQ
How do I fix aqualogic service bus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is aqualogic service bus being exploited right now?
None of the tracked aqualogic service bus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which aqualogic service bus CVE should I patch first?
CVE-2007-0432 currently ranks highest (45/100): BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy ser.