CVE-2005-2680

Published: Aug 23, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP4, when using entitlements, allows remote attackers to bypass access restrictions for the pages of a Book via crafted URLs.

Affected (5)

Products: Oracle: Weblogic Portal

Oracle

1 product

Weblogic Portal

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Oracle Weblogic Portal	Version 8.1
Oracle Weblogic Portal	Version 8.1 sp1
Oracle Weblogic Portal	Version 8.1 sp2
Oracle Weblogic Portal	Version 8.1 sp3
Oracle Weblogic Portal	Version 8.1 sp4

References (2)

http://dev2dev.bea.com/pub/advisory/137

Source: cve@mitre.org

PatchVendor Advisory

http://dev2dev.bea.com/pub/advisory/137

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.