GCVE - cpe:2.3:a:oracle:weblogic_portal:8.1:sp4:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:weblogic_portal:8.1:sp4:*:*:*:*:*:*

part: a version: 8.1 update: sp4

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	Weblogic Portal (`1ff3e9a9-3d8f-5ab6-ab67-9ddd7bb4672b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-0865`	vulnerable	2026-06-08 04:50:17.967783	Details available Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a floatable WLP portlet via unknown vectors. Published: 2008-02-21T01:00:00.000Z Updated: 2024-08-07T08:01:40.095Z Open on db.gcve.eu Reference links http://dev2dev.bea.com/pub/advisory/257 http://www.vupen.com/english/advisories/2008/0613 http://secunia.com/advisories/29041 http://www.securitytracker.com/id?1019451	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0864`	vulnerable	2026-06-08 04:50:17.964901	Details available Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow remote attackers to bypass intended access restrictions. Published: 2008-02-21T01:00:00.000Z Updated: 2024-08-07T08:01:40.100Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/0613 http://secunia.com/advisories/29041 http://www.securitytracker.com/id?1019454 http://dev2dev.bea.com/pub/advisory/256	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1358`	vulnerable	2026-06-08 04:48:57.016890	Details available Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user. Published: 2006-03-22T02:00:00.000Z Updated: 2024-08-07T17:12:20.691Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/1022 ftp://ftpna.beasys.com/pub/releases/security/patch_CR259534_81SP5.zip http://dev2dev.bea.com/pub/advisory/182 http://secunia.com/advisories/19308 http://www.securityfocus.com/bid/17164	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0428`	vulnerable	2026-06-08 04:48:53.832762	Details available Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), allows remote attackers to access restricted web resources via crafted URLs. Published: 2006-01-25T23:00:00.000Z Updated: 2024-08-07T16:34:14.674Z Open on db.gcve.eu Reference links http://secunia.com/advisories/18593 http://www.osvdb.org/22767 http://www.vupen.com/english/advisories/2006/0312 http://securitytracker.com/id?1015528 http://dev2dev.bea.com/pub/advisory/172	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2680`	vulnerable	2026-06-08 04:48:30.229115	Details available Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP4, when using entitlements, allows remote attackers to bypass access restrictions for the pages of a Book via crafted URLs. Published: 2005-08-23T04:00:00.000Z Updated: 2024-08-07T22:45:02.228Z Open on db.gcve.eu Reference links http://dev2dev.bea.com/pub/advisory/137	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.