What’s Vulnerable › Vulnerabilities

CVE-2008-0864

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-02-21 · updated 2026-06-16
• Weakness: CWE-264

Description

Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow remote attackers to bypass intended access restrictions.

Affected products

• Bea Systems Weblogic Portal: 8.1_sp6
• Oracle Weblogic Portal: 8.1-sp3, 8.1-sp4, 8.1-sp5

References

• http://dev2dev.bea.com/pub/advisory/256
• http://secunia.com/advisories/29041
• http://www.securitytracker.com/id?1019454
• http://www.vupen.com/english/advisories/2008/0613
• http://dev2dev.bea.com/pub/advisory/256
• http://secunia.com/advisories/29041
• http://www.securitytracker.com/id?1019454
• http://www.vupen.com/english/advisories/2008/0613

Get alerted when CVE-2008-0864 or the next vulnerability affects your stack