Oracle WebLogic Portal 8.1 Service Pack 3
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:weblogic_portal:8.1:sp3:*:*:*:*:*:*
part: a version: 8.1 update: sp3
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Weblogic Portal (1ff3e9a9-3d8f-5ab6-ab67-9ddd7bb4672b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-0865 |
vulnerable | 2026-06-08 04:50:17.967757 |
Details available
Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a floatable WLP portlet via unknown vectors.
Published: 2008-02-21T01:00:00.000Z
Updated: 2024-08-07T08:01:40.095Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0864 |
vulnerable | 2026-06-08 04:50:17.964364 |
Details available
Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow remote attackers to bypass intended access restrictions.
Published: 2008-02-21T01:00:00.000Z
Updated: 2024-08-07T08:01:40.100Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1358 |
vulnerable | 2026-06-08 04:48:57.016870 |
Details available
Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user.
Published: 2006-03-22T02:00:00.000Z
Updated: 2024-08-07T17:12:20.691Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0428 |
vulnerable | 2026-06-08 04:48:53.831899 |
Details available
Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), allows remote attackers to access restricted web resources via crafted URLs.
Published: 2006-01-25T23:00:00.000Z
Updated: 2024-08-07T16:34:14.674Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0425 |
vulnerable | 2026-06-08 04:48:53.819115 |
Details available
BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors.
Published: 2006-01-25T23:00:00.000Z
Updated: 2024-08-07T16:34:14.715Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0423 |
vulnerable | 2026-06-08 04:48:53.817635 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2680 |
vulnerable | 2026-06-08 04:48:30.228610 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.