CVE-2008-0868

BEA Systems Weblogic Portal - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 allows remote authenticated users to inject arbitrary web script or HTML via unknown vectors.

References (4)

Scores

EPSS 0.0032
EPSS Percentile 54.9%

Classification

CWE
CWE-79
Status draft

Affected Products (2)

bea_systems/weblogic_portal
oracle/weblogic_portal

Timeline

Published Feb 21, 2008
Tracked Since Feb 18, 2026