CVE-2007-2703: oracle weblogic_portal

EPSS trend

Probability

1.56%

Chance of exploitation in the next 30 days

Percentile

75%

Versus all other CVEs

30-day change

0.00 pp

From 1.56% on 21-09-2026

21-09-202621-10-2026

EPSS score

1.56%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

6 links

osvdb.org/36065VDB EntryX Refsource OSVDB
exchange.xforce.ibmcloud.com/vulnerabilities/34285VDB EntryX Refsource XF
secunia.com/advisories/25284Third Party AdvisoryX Refsource SECUNIAVendor Advisory
dev2dev.bea.com/pub/advisory/236Vendor AdvisoryX Refsource BEAPatch
www.securitytracker.com/id?1018060VDB EntryX Refsource SECTRACKVendor Advisory
www.vupen.com/english/advisories/2007/1815VDB EntryX Refsource VUPEN

Related vulnerabilities

CVE-2007-2702oracleweblogic_portal1.51%19y ago16-05-2007 01:00Cross-site scripting (XSS) vulnerability in the GroupSpace application in BEA WebLogic Portal 9.2 GA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the rich text editor.CVE-2007-0426oracleweblogic_portal3.28%19y ago23-01-2007 00:00BEA WebLogic Portal 9.2, when running in a WebLogic Server clustered environment using WebLogic Portal entitlements, does not properly propagate entitlement policy changes if the changes are made on a managed server while the Administrative Server is unavailable, which might allow attackers to bypass intended restrictions.CVE-2007-0423oracleweblogic_portal0.46%19y ago23-01-2007 00:00BEA WebLogic Portal 9.2 does not properly handle when an administrator deletes entitlements for a role, which causes other role entitlements to be "inadvertently affected," which has an unknown impact.CVE-2007-5576beatuxedo+41.00%19y ago18-10-2007 21:00BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows physically proximate attackers to obtain sensitive information via the (1) cnsbind, (2) cnsunbind, or (3) cnsls commands.CVE-2005-2680oracleweblogic_portal3.45%21y ago23-08-2005 04:00Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP4, when using entitlements, allows remote attackers to bypass access restrictions for the pages of a Book via crafted URLs.CVE-2005-1742beaweblogic_server+13.03%21y ago24-05-2005 04:00BEA WebLogic Server and WebLogic Express 8.1 SP2 and SP3 allows users with the Monitor security role to "shrink or reset JDBC connection pools."

All vulnerabilities inweblogic_portal

CVE-2007-2703: oracle weblogic_portal

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References