exploitDog

CVE-2006-1358

Опубликовано: 22 мар. 2006

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:weblogic_portal:8.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:weblogic_portal:8.1:sp1:*:*:*:*:*:*

cpe:2.3:a:oracle:weblogic_portal:8.1:sp2:*:*:*:*:*:*

cpe:2.3:a:oracle:weblogic_portal:8.1:sp3:*:*:*:*:*:*

cpe:2.3:a:oracle:weblogic_portal:8.1:sp4:*:*:*:*:*:*

cpe:2.3:a:oracle:weblogic_portal:8.1:sp5:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00531

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-gxxr-jv9h-5q3v

github

почти 4 года назад

Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user.

EPSS

Процентиль: 67%

0.00531

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other