CVE-2008-0864

MEDIUM 5.0CVE-2008-0864 · Published 21/02/2008 · updated 16/06/2026

In short

CVE-2008-0864 is a MEDIUM (CVSS 5.0) vulnerability affecting weblogic portal (bea systems), weblogic portal (oracle).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
weblogic portal bea_systems	`= 8.1_sp6`	No fix yet
weblogic portal oracle	`= 8.1`	No fix yet

Description

Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow remote attackers to bypass intended access restrictions.

References

dev2dev.bea.com/pub/advisory/256
secunia.com/advisories/29041
securitytracker.com/id
vupen.com/english/advisories/2008/0613

More vulnerabilities in weblogic portal

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free