CVE-2006-1358: Oracle WebLogic Portal

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user.

Affected products

• Oracle WebLogic Portal: version 8.1 only

Published 2006-03-22. Last modified 2026-06-16.