Security Advisory

CVE-2018-16954

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-09-18 02:00:00

Last updated 2024-08-05 10:39:57

Assigner mitre

State PUBLISHED

Description

An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The login function of the portal is vulnerable to insecure redirection (also called an open redirect). The in_hi_redirect parameter is not validated by the application after a successful login. NOTE: this CVE is assigned by MITRE and isnt validated by Oracle because Oracle WebCenter Interaction Portal is out of support.

← Browse all CVEs View on cve.org ↗