CVE-2018-16954

Publication date

2018-09-18 02:00:00

Family

mitre

State

PUBLISHED

Description

An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The login function of the portal is vulnerable to insecure redirection (also called an open redirect). The in_hi_redirect parameter is not validated by the application after a successful login. NOTE: this CVE is assigned by MITRE and isnt validated by Oracle because Oracle WebCenter Interaction Portal is out of support.