Andrew Davies of Portcullis Computer Security Ltd reports that an older version of FatWire's Web CMS product, Content Server 6.3.0, exposes cross-site scripting (XSS) vulnerabilities

It's easy to get lost in the maelstrom that is Oracle OpenWorld. With over 45,000 visitors, it takes over San Francisco each year. Its "appreciation" parties are legendary

I lost my voice last week at cmf2007, and while I've almost fully recovered, seeing 43,000 delegates at Oracle's annual lovefest, Oracle OpenWorld 2007, gave me new appreciation

Earlier this week Long Island, NY-based Web CMS vendor FatWire announced that it has acquired Infostoria, a Long Island-based wiki vendor

It's been a busy week for Oracle and BEA, since news got out that Oracle had made an offer to buy BEA

People often ask me about new trends beyond simply product roadmaps and flashy functionality. Like everything else in enterprise software, portals are indeed evolving.

It can be challenging to work with any big software vendor, but Oracle in particular does not seem to be making portal projects easy for its faithful customers.

Today Oracle announced the latest upgrade to its flagship database: 11g. The announcement brooks great interest within the ECM community because

Alan Pelz-Sharpe recently cited a brewing backlash against SOA in the enterprise content management world. In the portal market I'm certainly hearing growing concerns about SOA from the user community.

Almost exactly a year after open- sourcing its previously commercial portal product, Sun has decided to make a renewed push with its launch of "OpenPortal." OpenPortal is a new portal community where you can find all the source code to Sun Portal. OpenPortal remains a young project, but the portal package is indeed evolving.

Transactional document management (high-volume throughput of relatively static documents) has long been dominated by IBM and FileNet. EMC today announced that it too wants to compete in this lucrative market. Hence as part of its forthcoming Documentum D6 release, they have announced "TCM" (Transactional Content Management).

Today we announced the 3rd edition of our Enterprise Portals Report. Lots of interesting new tid-bits to report about MOSS 2007, Liferay, and other portal products. But the big story this season revolves around BEA and Oracle

It's not surprising that enterprises around the world typically first consider major North American vendors like EMC, IBM, and Open Text for their ECM needs, considering the millions those companies pour into marketing efforts. But buyers should look beyond the marketing, as many regional vendors may well have good technology solutions

On Wednesday, infrastructure and portal vendor BEA reported below-expected results for its first quarter. License revenues fell more than 30% from $169 million last quarter to about $115 million this quarter. BEA cited in its press release a "difficult selling environment, especially in the Americas"