Bea Systems Weblogic Portal — known CVE vulnerabilities

Every CVE whose affected-product data names Bea Systems Weblogic Portal, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2008-0870 — CVSS 7.5 (high): BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the…
• CVE-2008-0864 — CVSS 5.0 (medium): Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page…
• CVE-2008-0865 — CVSS 5.0 (medium): Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a…
• CVE-2008-0896 — CVSS 4.9 (medium): BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement…
• CVE-2008-0868 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 allows remote…