Oracle WebCenter Content Vulnerability Affects Oracle Fusion Middleware

CVE-2018-2564

What is CVE-2018-2564?

This vulnerability is found in the Oracle WebCenter Content component of Oracle Fusion Middleware. It allows an unauthenticated attacker with network access via HTTP to exploit the vulnerability. The attack requires human interaction from a person other than the attacker to be successful. While the vulnerability resides within the Oracle WebCenter Content, successful exploitation may have significant repercussions on other interconnected products. The risks include unauthorized access to create, delete, or modify critical data, as well as unauthorized read access to some sensitive data within the Oracle WebCenter Content environment.

References