CVE-2005-2680: Oracle WebLogic Portal

Medium severity, CVSS 5.0. EPSS: 3.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP4, when using entitlements, allows remote attackers to bypass access restrictions for the pages of a Book via crafted URLs.

Affected products

• Oracle WebLogic Portal: version 8.1 only

Published 2005-08-23. Last modified 2026-06-16.