CVE-2008-0870

BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal…

published February 21, 2008

CVSS
—
EPSS
1%
Percentile
72.7
In the wild
Unconfirmed
What it is

BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal Administration Console to an http URI, which allows remote attackers to sniff the session.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01431 · 72.7th percentile
Published
2008-02-21T01:00Z
EPSS history
Timeline
  • 21 FEB 01:00Z
    BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal…
    cvelistv5