CVE-2018-16952

2018-09-1802:00:00

mitre

www.cve.org

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

48.0%

JSON

The Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site Request Forgery in its design. The impact is sensitive actions in the portal (such as changing a portal user’s password). NOTE: this CVE is assigned by MITRE and isn’t validated by Oracle because Oracle WebCenter Interaction Portal is out of support.

References

www.securityfocus.com/bid/105350

seclists.org/fulldisclosure/2018/Sep/22