| Package | Affected versions | Patched versions |
|---|---|---|
| weblogic portal | = 10.0= 9.2 |
BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement policies for other content portlets, which allows attackers to bypass intended access restrictions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free