GCVE - cpe:2.3:a:oracle:weblogic_portal:9.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:weblogic_portal:9.2:*:*:*:*:*:*:*

part: a version: 9.2 update: *

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	Weblogic Portal (`1ff3e9a9-3d8f-5ab6-ab67-9ddd7bb4672b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-0870`	vulnerable	2026-06-08 04:50:17.981694	Details available BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal Administration Console to an http URI, which allows remote attackers to sniff the session. Published: 2008-02-21T01:00:00.000Z Updated: 2024-08-07T08:01:40.034Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/0613 http://dev2dev.bea.com/pub/advisory/264 http://secunia.com/advisories/29041 http://www.securitytracker.com/id?1019442	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0868`	vulnerable	2026-06-08 04:50:17.976205	Details available Cross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 allows remote authenticated users to inject arbitrary web script or HTML via unknown vectors. Published: 2008-02-21T01:00:00.000Z Updated: 2024-08-07T08:01:39.768Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1019452 http://www.vupen.com/english/advisories/2008/0613 http://secunia.com/advisories/29041 http://dev2dev.bea.com/pub/advisory/261	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5576`	vulnerable	2026-06-08 04:50:06.436625	Details available BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands. Published: 2007-10-18T21:00:00.000Z Updated: 2024-08-07T15:39:13.505Z Open on db.gcve.eu Reference links http://osvdb.org/45478 https://exchange.xforce.ibmcloud.com/vulnerabilities/34290 http://dev2dev.bea.com/pub/advisory/226 http://www.vupen.com/english/advisories/2007/1813	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0426`	vulnerable	2026-06-08 04:49:32.076869	Details available BEA WebLogic Portal 9.2, when running in a WebLogic Server clustered environment using WebLogic Portal entitlements, does not properly propagate entitlement policy changes if the changes are made on a managed server while the Administrative Server is unavailable, which might allow attackers to bypass intended restrictions. Published: 2007-01-23T00:00:00.000Z Updated: 2024-08-07T12:19:30.318Z Open on db.gcve.eu Reference links http://secunia.com/advisories/23750 http://www.securityfocus.com/bid/22082 http://securitytracker.com/id?1017521 http://www.vupen.com/english/advisories/2007/0213 http://osvdb.org/32854	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0423`	vulnerable	2026-06-08 04:49:32.074395	Details available BEA WebLogic Portal 9.2 does not properly handle when an administrator deletes entitlements for a role, which causes other role entitlements to be "inadvertently affected," which has an unknown impact. Published: 2007-01-23T00:00:00.000Z Updated: 2024-08-07T12:19:30.076Z Open on db.gcve.eu Reference links http://osvdb.org/32857 http://secunia.com/advisories/23750 http://www.securityfocus.com/bid/22082 http://securitytracker.com/id?1017521 http://www.vupen.com/english/advisories/2007/0213	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.