CVE-2018-16954

An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The login function of the portal is vulnerable to insecure redirection also called an open redirect. The inhiredirect parameter is not validated by the application after a successful login. NOTE: this CVE is assigned by MITRE...

CVE-2018-16954

Summary: CVE-2018-16954 affects Oracle WebCenter Interaction Portal 10.3.3. The login function does not validate the in_hi_redirect parameter, enabling an open redirect after successful login. This is due to insecure redirection in the login flow. The vulnerability’s exploitation details, affecte...

CVE-2018-16954

An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The login function of the portal is vulnerable to insecure redirection also called an open redirect. The inhiredirect parameter is not validated by the application after a successful login. NOTE: this CVE is assigned by MITRE...