CVE-2006-0428 — Oracle Weblogic Portal vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
1.4%
top 19.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Weblogic Portal
Timeline
PublishedJan 25
Latest updateMay 1

Description

Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), allows remote attackers to access restricted web resources via crafted URLs.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: dev2dev.bea.com ↗Patch: securitytracker.com ↗Patch: dev2dev.bea.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-vx2m-q5fp-96mg: Unspecified vulnerability in BEA WebLogic Portal 8↗2022-05-01
▶
CVEList
CVE-2006-0428: Unspecified vulnerability in BEA WebLogic Portal 8↗2006-01-25
▶
CVE-2006-0428 — Oracle Weblogic Portal vulnerability | cvebase