Security Advisory

CVE-2018-16952

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-09-18 02:00:00

Last updated 2024-08-05 10:39:58

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site Request Forgery in its design. The impact is sensitive actions in the portal (such as changing a portal user's password). NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle WebCenter Interaction Portal is out of support.

← Browse all CVEs View on cve.org ↗