← Back

Jasig

jasig

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Uportal
uportal
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-3417
1Jasig
1Uportal
May 6, 2026
May 29, 2014
N/A· v4
N/A· v3
6.5 MEDIUM· v2
uPortal before 4.0.13.1 does not properly check the CONFIG permission, which allows remote authenticated users to configure portlets by leveraging the SUBSCRIBE permission for a portlet.
CVE-2014-3416
1Jasig
1Uportal
May 6, 2026
May 29, 2014
N/A· v4
N/A· v3
6.5 MEDIUM· v2
uPortal before 4.0.13.1 does not properly check the MANAGE permissions, which allows remote authenticated users to manage arbitrary portlets by leveraging the SUBSCRIBE permission for the portlet-admin portlet.