cbcvebase.
CVE-2008-0896
published 2008-02-22

CVE-2008-0896: BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement policies for other…

PriorityP420medium4.9CVSS 2.0
AVNACMAuSCPIPAN
EPSS
0.80%
52.2th percentile
BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement policies for other content portlets, which allows attackers to bypass intended access restrictions.

Affected

2 ranges
VendorProductVersion rangeFixed in
bea_systemsweblogic_portal——
bea_systemsweblogic_portal——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.