← Database

CVE-2008-0868

MEDIUM CVSS: 4.3 Published: 2008-02-21 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 allows remote authenticated users to inject arbitrary web script or HTML via unknown vectors.

Affected Platforms

Oracle Weblogic PortalBea Systems Weblogic Portal

Weakness Type

CWE-79

References