CVE-2008-0865 Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a floatable WLP portlet via unknown vectors.
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a floatable WLP portlet via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bea systems weblogic portal | = 8.1_sp6 | No fix listed |
| oracle weblogic portal | = 8.1 | No fix listed |
| oracle weblogic portal | = 8.1-sp1 | No fix listed |
| oracle weblogic portal | = 8.1-sp2 | No fix listed |
| oracle weblogic portal | = 8.1-sp3 | No fix listed |
| oracle weblogic portal | = 8.1-sp4 | No fix listed |
| oracle weblogic portal | = 8.1-sp5 | No fix listed |
References
- BEA08-184.00 vendor-advisory
- 29041 third-party-advisory
- 1019451 vdb-entry
- ADV-2008-0613 vdb-entry