VULNERABILITY INTELLIGENCE
CVE-2008-0896
CVSS score4.9 MEDIUM
EPSS probability0.80%
CISA KEVNot currently listed
Published2008-02-22
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:P/I:P/A:N
Description
BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement policies for other content portlets, which allows attackers to bypass intended access restrictions.