VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 21, 2008· Updated Jun 16, 2026

CVE-2008-0868

CVE-2008-0868

Description

Cross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 allows remote authenticated users to inject arbitrary web script or HTML via unknown vectors.

Affected products

3
  • Bea/WebLogic Portal2 versions
    cpe:2.3:a:bea_systems:weblogic_portal:10.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bea_systems:weblogic_portal:10.0:*:*:*:*:*:*:*
    • (no CPE)range: 10.0, 9.2 MP1
  • Oracle Corporation/Weblogic Portal
    cpe:2.3:a:oracle:weblogic_portal:9.2:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.