CVE-2008-0865

Published: Feb 21, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a floatable WLP portlet via unknown vectors.

Affected (7)

Products: Bea Systems: Weblogic Portal · Oracle: Weblogic Portal

1 product

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Bea Systems Weblogic Portal	Version 8.1_sp6
Oracle Weblogic Portal	Version 8.1
Oracle Weblogic Portal	Version 8.1 sp1
Oracle Weblogic Portal	Version 8.1 sp2
Oracle Weblogic Portal	Version 8.1 sp3
Oracle Weblogic Portal	Version 8.1 sp4
Oracle Weblogic Portal	Version 8.1 sp5