Vulnerability Database

296,733

Total vulnerabilities in the database

CVE-2008-0896

BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement policies for other content portlets, which allows attackers to bypass intended access restrictions.

  • Published: Feb 22, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-0896
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.9
  • AV:N/AC:M/Au:S/C:P/I:P/A:N

CWEs:

Software From Fixed in
bea_systems / weblogic_portal 10.0 10.0.x
bea_systems / weblogic_portal 9.2-mp1 9.2-mp1.x