CVE-2008-0864: Bea Systems WebLogic Portal

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow remote attackers to bypass intended access restrictions.

Affected products

• Bea Systems WebLogic Portal: version 8.1_sp6 only
• Oracle WebLogic Portal: version 8.1 only

Published 2008-02-21. Last modified 2026-06-16.