Webcenter Interaction (Oracle) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2018-09-18. Vendor: Oracle.

CVEs of Webcenter Interaction

• CVE-2018-16958 - CVSS 5.4 (medium), 2018-09-18: An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The ASP.NET_SessionID primary session cookie, when Internet Information Services (IIS)…
• CVE-2018-16959 - CVSS 5.3 (medium), 2018-09-18: An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The portal component is delivered with an insecure default User Profile community…
• CVE-2018-16952 - CVSS 8.8 (high), 2018-09-18: The Oracle WebCenter Interaction Portal 10.3.3 does not implement protection against Cross-site Request Forgery in its design. The impact is sensitive actions…
• CVE-2018-16955 - CVSS 6.1 (medium), 2018-09-18: The login function of Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site scripting (XSS). The content of the in_hi_redirect…
• CVE-2018-16954 - CVSS 6.1 (medium), 2018-09-18: An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The login function of the portal is vulnerable to insecure redirection (also called an…
• CVE-2018-16957 - CVSS 9.8 (critical), 2018-09-18: The Oracle WebCenter Interaction 10.3.3 search service queryd.exe binary is compiled with the i1g2s3c4 hardcoded password. Authentication to the Oracle WCI…
• CVE-2018-16953 - CVSS 6.1 (medium), 2018-09-18: The AjaxView::DisplayResponse() function of the portalpages.dll assembly in Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site…
• CVE-2018-16956 - CVSS 6.5 (medium), 2018-09-18: The AjaxControl component of Oracle WebCenter Interaction Portal 10.3.3 does not validate the names of pages when processing page rename requests. Pages can…