CVE-2008-0896

MEDIUM 4.9CVE-2008-0896 · Published 22/02/2008 · updated 16/06/2026

In short

CVE-2008-0896 is a MEDIUM (CVSS 4.9) vulnerability affecting weblogic portal (bea systems).
Chance of exploitation in the next 30 days (EPSS): 0.80%, higher than 56.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
weblogic portal bea_systems	`= 10.0= 9.2`	No fix yet

Description

BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement policies for other content portlets, which allows attackers to bypass intended access restrictions.

References

dev2dev.bea.com/pub/advisory/266 · Patch
secunia.com/advisories/29041
securitytracker.com/id
vupen.com/english/advisories/2008/0613

More vulnerabilities in weblogic portal

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free