PT-2018-13798

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Interaction Portal version 10.3.3 Description An issue was discovered in the portal component of Oracle WebCenter Interaction Portal, which is delivered with an insecure default User Profile community configuration. This...

PT-2018-13791

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Interaction Portal version 10.3.3 Description The issue concerns the lack of protection against Cross-site Request Forgery in the design of the portal, which can lead to sensitive actions being performed, such as changing a...

CVE-2018-16958: Incorrect Permission Assignment for Critical Resource

An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The ASP.NETSessionID primary session cookie, when Internet Information Services IIS with ASP.NET is used, is not protected with the HttpOnly attribute. The attribute cannot be enabled by customers. Consequently, this cookie is...

PT-2018-13797

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Interaction Portal version 10.3.3 Description A security issue exists where the ASP.NET SessionID primary session cookie is not protected with the HttpOnly attribute when Internet Information Services IIS with ASP.NET is used...

PT-2013-3211

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Interaction versions 6.5.1 and 10.3.3.0 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the Image Service in the Oracle WebCenter Interaction...

CVE-2013-1529: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Interaction component in Oracle Fusion Middleware 6.5.1 and 10.3.3.0 allows remote attackers to affect integrity via unknown vectors related to Image Service...