Vulnerabilities > CVE-2006-1358 - Information Disclosure vulnerability in Oracle Weblogic Portal 8.1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
oracle
NVD
Published: 2006-03-22
Updated: 2018-10-30

Summary

Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user.

Vulnerable Configurations

Part Description Count
Application
Oracle
6

References