VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 23, 2005· Updated Jun 16, 2026

CVE-2005-2680

CVE-2005-2680

Description

Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP4, when using entitlements, allows remote attackers to bypass access restrictions for the pages of a Book via crafted URLs.

Affected products

6
  • Oracle Corporation/Weblogic Portal5 versions
    cpe:2.3:a:oracle:weblogic_portal:8.1:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:oracle:weblogic_portal:8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:weblogic_portal:8.1:sp1:*:*:*:*:*:*
    • cpe:2.3:a:oracle:weblogic_portal:8.1:sp2:*:*:*:*:*:*
    • cpe:2.3:a:oracle:weblogic_portal:8.1:sp3:*:*:*:*:*:*
    • cpe:2.3:a:oracle:weblogic_portal:8.1:sp4:*:*:*:*:*:*
  • Bea/WebLogic Portalllm-fuzzy
    Range: <=8.1 SP4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.