VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Aug 23, 2005· Updated Apr 16, 2026

CVE-2005-2680

CVE-2005-2680

Description

Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP4, when using entitlements, allows remote attackers to bypass access restrictions for the pages of a Book via crafted URLs.

Affected products

5
  • Oracle Corporation/Weblogic Portal5 versions
    cpe:2.3:a:oracle:weblogic_portal:8.1:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:oracle:weblogic_portal:8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:weblogic_portal:8.1:sp1:*:*:*:*:*:*
    • cpe:2.3:a:oracle:weblogic_portal:8.1:sp2:*:*:*:*:*:*
    • cpe:2.3:a:oracle:weblogic_portal:8.1:sp3:*:*:*:*:*:*
    • cpe:2.3:a:oracle:weblogic_portal:8.1:sp4:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.