CVE-2007-6509 : Unspecified vulnerability in Appian Enterprise Business Process Management (BPM) Suite 5.6 SP1 allows remote attackers t

Unspecified vulnerability in Appian Enterprise Business Process Management (BPM) Suite 5.6 SP1 allows remote attackers to cause a denial of service via a crafted packet to port 5400/tcp.

Published 2007-12-21 19:46:00

Updated 2017-08-08 01:29:12

Source MITRE

View at NVD, CVE.org

Vulnerability category: Input validationDenial of service

Exploit prediction scoring system (EPSS) score for CVE-2007-6509

Probability of exploitation activity in the next 30 days: 74.46%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 98 % EPSS Score History EPSS FAQ

Metasploit modules for CVE-2007-6509

Appian Enterprise Business Suite 5.6 SP1 DoS

Disclosure Date: 2007-12-17

First seen: 2020-04-26

auxiliary/dos/windows/appian/appian_bpm

This module exploits a denial of service flaw in the Appian Enterprise Business Suite service. Authors: - guiness.stout <guinness.stout@gmail.com>

More information

CVSS scores for CVE-2007-6509

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

CWE ids for CVE-2007-6509

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-6509

Products affected by CVE-2007-6509

Appian » Business Process Management Suite » Version: 5.6 Update SP1
cpe:2.3:a:appian:business_process_management_suite:5.6:sp1:*:*:*:*:*:*
Matching versions