← Back

Uportal

uportal

Vendor: Jasig • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-3417
1Jasig
1Uportal
May 6, 2026
May 29, 2014
N/A· v4
N/A· v3
6.5 MEDIUM· v2
uPortal before 4.0.13.1 does not properly check the CONFIG permission, which allows remote authenticated users to configure portlets by leveraging the SUBSCRIBE permission for a portlet.
CVE-2014-3416
1Jasig
1Uportal
May 6, 2026
May 29, 2014
N/A· v4
N/A· v3
6.5 MEDIUM· v2
uPortal before 4.0.13.1 does not properly check the MANAGE permissions, which allows remote authenticated users to manage arbitrary portlets by leveraging the SUBSCRIBE permission for the portlet-admin portlet.