CVE-2018-16956

CVE-2018-16956 affects Oracle WebCenter Interaction Portal 10.3.3, specifically the AjaxControl component. The vulnerability arises because page rename requests do not validate the target page name, allowing characters unsupported by the web server (e.g., 0x7f) to be used. This can render renamed...