CVE-2018-16952 The Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site Request Forgery in its design. The impact is sensitive actions in the portal (such as changing a portal....
HighCVSS 8.8
EPSS 0.67%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site Request Forgery in its design. The impact is sensitive actions in the portal (such as changing a portal user's password). NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle WebCenter Interaction Portal is out of support.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle webcenter interaction | = 10.3.3 | No fix listed |
References
- 105350 third-party-advisory vdb-entry
- seclists.org mailing-list third-party-advisory