Oracle WebCenter Sites Vulnerability Exposes Data to Unauthorized Access

CVE-2018-2791

Summary

A vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware exposes the system to attacks from unauthenticated users. The flaw allows an attacker with network access via HTTP to manipulate Oracle WebCenter Sites without any prior authentication. Successful exploitation requires human interaction from a user other than the attacker, which can lead to unauthorized access to sensitive data. This access may result in the ability to update, insert, or delete data within Oracle WebCenter Sites, significantly compromising the integrity and confidentiality of the information managed by the system. While the vulnerability resides in WebCenter Sites, the potential consequences may extend to other affected Oracle products.

References