Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
bea systems weblogic portal 10.0 vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2008-0870
BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal Administration Console to an http URI, which allows remote malicious users to sniff the session.
Bea Systems Weblogic Portal 9.2
Oracle Weblogic Portal 9.2
Bea Systems Weblogic Portal 10.0
4.9
CVSSv2
CVE-2008-0896
BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement policies for other content portlets, which allows malicious users to bypass intended access restrictions.
Bea Systems Weblogic Portal 9.2
Bea Systems Weblogic Portal 10.0
4.3
CVSSv2
CVE-2008-0868
Cross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 allows remote authenticated users to inject arbitrary web script or HTML via unknown vectors.
Oracle Weblogic Portal 9.2
Bea Systems Weblogic Portal 10.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
SSRF
CVE-2023-52162
CVE-2024-23670
CVE-2024-5404
man-in-the-middle
CVE-2024-5214
CVE-2024-4358
CVE-2024-20696
hard-coded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started