GCVE - cpe:2.3:a:oracle:weblogic_portal:8.1:sp2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:weblogic_portal:8.1:sp2:*:*:*:*:*:*

part: a version: 8.1 update: sp2

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	Weblogic Portal (`1ff3e9a9-3d8f-5ab6-ab67-9ddd7bb4672b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-0865`	vulnerable	2026-06-08 04:50:17.967716	Details available Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a floatable WLP portlet via unknown vectors. Published: 2008-02-21T01:00:00.000Z Updated: 2024-08-07T08:01:40.095Z Open on db.gcve.eu Reference links http://dev2dev.bea.com/pub/advisory/257 http://www.vupen.com/english/advisories/2008/0613 http://secunia.com/advisories/29041 http://www.securitytracker.com/id?1019451	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1358`	vulnerable	2026-06-08 04:48:57.016850	Details available Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user. Published: 2006-03-22T02:00:00.000Z Updated: 2024-08-07T17:12:20.691Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/1022 ftp://ftpna.beasys.com/pub/releases/security/patch_CR259534_81SP5.zip http://dev2dev.bea.com/pub/advisory/182 http://secunia.com/advisories/19308 http://www.securityfocus.com/bid/17164	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0425`	vulnerable	2026-06-08 04:48:53.819098	Details available BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors. Published: 2006-01-25T23:00:00.000Z Updated: 2024-08-07T16:34:14.715Z Open on db.gcve.eu Reference links http://secunia.com/advisories/18593 https://exchange.xforce.ibmcloud.com/vulnerabilities/24297 http://www.vupen.com/english/advisories/2006/0312 http://securitytracker.com/id?1015528 http://dev2dev.bea.com/pub/advisory/169	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0423`	vulnerable	2026-06-08 04:48:53.817143	Details available BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the config.xml file, which allows attackers to gain privileges. Published: 2006-01-25T23:00:00.000Z Updated: 2024-08-07T16:34:14.691Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/0613 https://exchange.xforce.ibmcloud.com/vulnerabilities/40705 http://secunia.com/advisories/18593 http://dev2dev.bea.com/pub/advisory/167 http://www.vupen.com/english/advisories/2006/0312	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2680`	vulnerable	2026-06-08 04:48:30.228130	Details available Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP4, when using entitlements, allows remote attackers to bypass access restrictions for the pages of a Book via crafted URLs. Published: 2005-08-23T04:00:00.000Z Updated: 2024-08-07T22:45:02.228Z Open on db.gcve.eu Reference links http://dev2dev.bea.com/pub/advisory/137	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.