GCVE - cpe:2.3:a:bea_systems:weblogic_portal:10.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:bea_systems:weblogic_portal:10.0:*:*:*:*:*:*:*

part: a version: 10.0 update: *

Vendor	Bea Systems (`3896c7df-5770-5541-9221-c6057b3b825f`)
Product	Weblogic Portal (`28aa7f17-2075-5a4d-a1da-399f37f463d7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-0896`	vulnerable	2026-06-08 04:50:18.154056	Details available BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement policies for other content portlets, which allows attackers to bypass intended access restrictions. Published: 2008-02-22T21:00:00.000Z Updated: 2024-08-07T08:01:40.095Z Open on db.gcve.eu Reference links http://dev2dev.bea.com/pub/advisory/266 http://www.vupen.com/english/advisories/2008/0613 http://www.securitytracker.com/id?1019453 http://secunia.com/advisories/29041	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0870`	vulnerable	2026-06-08 04:50:17.981668	Details available BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal Administration Console to an http URI, which allows remote attackers to sniff the session. Published: 2008-02-21T01:00:00.000Z Updated: 2024-08-07T08:01:40.034Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/0613 http://dev2dev.bea.com/pub/advisory/264 http://secunia.com/advisories/29041 http://www.securitytracker.com/id?1019442	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0868`	vulnerable	2026-06-08 04:50:17.975646	Details available Cross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 allows remote authenticated users to inject arbitrary web script or HTML via unknown vectors. Published: 2008-02-21T01:00:00.000Z Updated: 2024-08-07T08:01:39.768Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1019452 http://www.vupen.com/english/advisories/2008/0613 http://secunia.com/advisories/29041 http://dev2dev.bea.com/pub/advisory/261	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.