Oracle Portal Discussion Forum Portlet Vulnerabilities Detected

Recently multiple remote vulnerabilities/ exploits has been reported in Oracle Portal's Discussion Forum Portlet. I am not very sure about the severity of the exploit, but it is always good to play safe. Please check the test page for details.

Comments

Post a Comment

Popular posts from this blog

IDE for JSR 286 Portlet Development

We are starting a new project on JSR 286 and wondering what should be the best IDE for JSR 286 portlet development. The project is on IBM, so IBM RAD (Rapid Application Developer) was the first choice. Though as of now the latest production release 7.0 doesn't support JSR 286 and 7.5 version which supports JSR 286 is just in beta stage. IBM has not communicated any clear date for GA. I think it leaves us to "Portal Pack 2.0 for NetBeans 6.1", a plugin for NetBeans. I have not tested it yet, but it says the support of JSR 286. I am not sure whether it has embedded JSR 286 container for testing portlet within IDE or not? I'll check and update on this. By the way, have you started developing JSR 286 portlets? If yes, which IDE do you use?
Read more

A Step Closer to Digital Human - Agentic Browser

Image
Recently, we saw the announcements of ChatGPT Atlas and Perplexity Comet. Both of these seem like somewhat useless products and don't appear to add much on top of a standard Chrome browser. However, I believe that these "agentic browsers" are going to have huge impact. Why? The biggest problem with current AI agents is that they cannot see what we see. They cannot consume what we consume, so they cannot act the way we act. We live much of our lives digitally and online, but our agents do not. If I were able to give my agent access to my Instagram, YouTube, WhatsApp, email, calendar, etc., it would start to think more and more like me. Since the browser already has access to all of this, it is the key component required. There are one or two more features that would be required to make a big impact.  First, we would need the ability to schedule tasks. This way, my agent could be like me, checking WhatsApp, email, and YouTube periodically. Second, like Cursor and Claude Cod...
Read more

Where Am I?

Image
My regular readers are wondering where I suddenly disappeared. Why I am not posting regularly on any of the blogs and forums. I really feel sorry about it. In fact, I also feel that I am not justifying my involvement with JSR 286. There are multiple reasons for it and the most important is my occupancy with our running portal projects. I was also busy in finishing my Portlets Factory. Anyways, now I hope I am back and able to contribute to all such areas. You will be wondering what exactly the "portlets factory" is. Portlets Factory is going to have different meaning to different people. But the most common meaning is a place where you can get readymade portlets. In short, I am working towards creating bunch of JSR 168 compliant out-of-box portlets. I always felt strong need of portlets that can be readily utilized with the J2EE portals but not many companies are working towards that. Here are few of the latest portlets we have finished - 1. Collaboration Portlets for Lotus D...
Read more