CVE-2018-16952

The Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site Request Forgery in its design. The impact is sensitive actions in the portal such as changing a portal user's password. NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle...

CVE-2018-16952

The CVE describes a CSRF design flaw in Oracle WebCenter Interaction Portal 10.3.3, where protection against CSRF is not implemented. This allows potential unauthorized actions in the portal, such as changing a user’s password. The issue is documented across multiple feeds (NVD, CVE listing, CNVD...