CVE-2007-2703: Oracle WebLogic Portal

Low severity, CVSS 3.6. EPSS: 1.6% chance of exploitation in the next 30 days.

BEA WebLogic Portal 9.2 GA can corrupt a visitor entitlements role if an administrator provides a long role description, which might allow remote authenticated users to access privileged resources.

Affected products

• Oracle WebLogic Portal: version 9.2 only

Published 2007-05-16. Last modified 2026-06-16.