WP
Product
Weblogic Portal
21
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Weblogic Portal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-0864 | – | Feb 21 | Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow… Affected: 8.1; 8.1; 8.1 |
| CVE-2008-0868 | – | Feb 21 | Cross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 allows remote authenticated users to inject arbitrary web… Affected: 9.2 |
| CVE-2008-0870 | – | Feb 21 | BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal Administration Console to an… Affected: 9.2 |
| CVE-2008-0865 | – | Feb 21 | Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a floatable WLP portlet via unknown vectors Affected: 8.1; 8.1; 8.1; 8.1; 8.1; 8.1 |
| CVE-2007-5576 | – | Oct 18 | BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain… Affected: 9.2 |
| CVE-2007-2703 | – | May 16 | BEA WebLogic Portal 9.2 GA can corrupt a visitor entitlements role if an administrator provides a long role description, which might allow remote authenticated users to access… Affected: 9.2 |
| CVE-2007-2702 | – | May 16 | Cross-site scripting (XSS) vulnerability in the GroupSpace application in BEA WebLogic Portal 9.2 GA allows remote authenticated users to inject arbitrary web script or HTML via… Affected: 9.2 |
| CVE-2007-0426 | – | Jan 23 | BEA WebLogic Portal 9.2, when running in a WebLogic Server clustered environment using WebLogic Portal entitlements, does not properly propagate entitlement policy changes if the… Affected: 9.2 |
| CVE-2007-0423 | – | Jan 23 | BEA WebLogic Portal 9.2 does not properly handle when an administrator deletes entitlements for a role, which causes other role entitlements to be "inadvertently affected," which… Affected: 9.2 |
| CVE-2006-1358 | – | Mar 22 | Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a… Affected: 8.1; 8.1; 8.1; 8.1; 8.1; 8.1 |
| CVE-2006-0428 | – | Jan 25 | Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), allows remote attackers to access restricted web resources… Affected: 8.1; 8.1; 8.1 |
| CVE-2006-0423 | – | Jan 25 | BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the config.xml file, which allows attackers to gain privileges Affected: 8.1; 8.1; 8.1; 8.1 |
| CVE-2006-0425 | – | Jan 25 | BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors Affected: 8.1; 8.1; 8.1; 8.1 |
| CVE-2005-2680 | – | Aug 23 | Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP4, when using entitlements, allows remote attackers to bypass access restrictions for the pages of a Book via… Affected: 8.1; 8.1; 8.1; 8.1; 8.1 |
| CVE-2005-1749 | – | May 24 | Buffer overflow in BEA WebLogic Server and WebLogic Express 6.1 Service Pack 4 allows remote attackers to cause a denial of service (CPU consumption from thread looping) Affected: 8.0 |
| CVE-2005-1748 | – | May 24 | The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymous binds, which may allow remote… Affected: 8.0 |
| CVE-2005-1747 | – | May 24 | Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 6, allow remote attackers to inject… Affected: 8.0 |
| CVE-2005-1746 | – | May 24 | The cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contact any host or port specified in a cookie, even when it is not in the cluster,… Affected: 8.0 |
| CVE-2005-1745 | – | May 24 | The UserLogin control in BEA WebLogic Portal 8.1 through Service Pack 3 prints the password to standard output when an incorrect login attempt is made, which could make it easier… Affected: 8.0 |
| CVE-2005-1742 | – | May 24 | BEA WebLogic Server and WebLogic Express 8.1 SP2 and SP3 allows users with the Monitor security role to "shrink or reset JDBC connection pools." Affected: 8.0 |
| CVE-2005-1743 | – | May 24 | BEA WebLogic Server and WebLogic Express 8.1 through Service Pack 3 and 7.0 through Service Pack 5 does not properly handle when a security provider throws an exception, which may… Affected: 8.0 |
Showing 21