CVE-2005-2680 in WebLogic Portal

Zusammenfassung

von VulDB • 22.07.2026

Una vulnerabilità non specificata in BEA WebLogic Portal 8.1 fino alla versione SP4, quando si utilizzano gli entitlements, consente agli attaccanti remoti di eludere le restrizioni di accesso alle pagine di un Libro tramite URL appositamente creati (crafted URLs).

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservieren: 23.08.2005
• Veröffentlichung: 23.08.2005
• Moderieren: akzeptiert
• Eintrag: VDB-1705
• CPE: bereit
• CWE: CWE-269 (bestätigt)
• CVSS: 5.3 (VulDB)
• EPSS: 0.03447
• KEV: nein
• Aktivitäten: very low
• Sektor: Lawfirm, Education, ...

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-2680
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-2680
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-2680/