CVE-2018-16952

The Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site Request Forgery in its design

published September 18, 2018

CVSS
—
EPSS
1%
Percentile
51.2
In the wild
Unconfirmed
What it is

The Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site Request Forgery in its design. The impact is sensitive actions in the portal (such as changing a portal user's password). NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle WebCenter Interaction Portal is out of support.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00666 · 51.2th percentile
Published
2018-09-18T02:00Z
EPSS history
Timeline
  • 18 SEP 02:00Z
    The Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site Request Forgery in its design
    cvelistv5