CVE-2007-0423 — Oracle Weblogic Portal vulnerability

4 documents4 sources
Severity
4.4MEDIUMNVD
EPSS
0.3%
top 51.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Weblogic Portal
Timeline
PublishedJan 23
Latest updateMay 1

Description

BEA WebLogic Portal 9.2 does not properly handle when an administrator deletes entitlements for a role, which causes other role entitlements to be "inadvertently affected," which has an unknown impact.

CVSS vector

AV:L/AC:M/C:P/I:P/A:PExploitability: 3.4 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: dev2dev.bea.com ↗Patch: dev2dev.bea.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-f92v-xg8f-pv9r: BEA WebLogic Portal 9↗2022-05-01
▶
CVEList
CVE-2007-0423: BEA WebLogic Portal 9↗2007-01-23
▶

💥Exploits & PoCs

1
Exploit-DB
Lama Software 14.12.2007 - Multiple Remote File Inclusions↗2008-01-21
▶
CVE-2007-0423 — Oracle Weblogic Portal vulnerability | cvebase