Unrated severityNVD Advisory· Published May 16, 2007· Updated Jun 16, 2026
CVE-2007-2702
CVE-2007-2702
Description
Cross-site scripting (XSS) vulnerability in the GroupSpace application in BEA WebLogic Portal 9.2 GA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the rich text editor.
Affected products
2- cpe:2.3:a:oracle:weblogic_portal:9.2:ga:*:*:*:*:*:*
- Range: = 9.2 GA
Patches
Vulnerability mechanics
References
6- dev2dev.bea.com/pub/advisory/235nvdPatchVendor Advisory
- secunia.com/advisories/25284nvdVendor Advisory
- osvdb.org/36066nvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2007/1815nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/34283nvd
News mentions
0No linked articles in our index yet.