Read the docs

Bea Systems

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Bea Systems records in CISA KEV

No Bea Systems vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Weblogic Portal 5 records LOW Weblogic Server 5 records CRITICAL Aqualogic Interaction 2 records LOW Weblogic Express 2 records LOW Apache Connector In Weblogic Server 1 record CRITICAL Plumtree Collaboration 1 record LOW Plumtree Foundation 1 record LOW Weblogic 1 record LOW

Records

5 records in Weblogic Portal · all components

TI-2008-00830 CVE-2008-0864 · GHSA-78g2-xjfj-jhp5

Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove…

Priority LOW 26

Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow remote attackers to bypass intended access r…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0181 Published 2008-02-21 No fix listed CWE-264
TI-2008-00860 CVE-2008-0896 · GHSA-f44m-72vx-4m92

BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single…

Priority LOW 24

BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement policies for other content portlets, which allows attackers to bypass intended acces…

CVSS 2.0MEDIUM 4.9 Network Low privileges Interaction — EPSS 0.00796 Published 2008-02-22 No fix listed CWE-264
Open these records in search →