Oracle WebCenter Content Vulnerability in Oracle Fusion Middleware

CVE-2018-2828

Summary

This vulnerability exists in the Oracle WebCenter Content component of Oracle Fusion Middleware, specifically within the Content Server. It allows low-privileged attackers with network access via HTTP to exploit the system, leading to potential unauthorized access to sensitive data. The attack process necessitates human interaction, which introduces a unique attack vector. Despite the vulnerability being localized within Oracle WebCenter Content, it poses risks to connected systems, as successful exploitation may enable unauthorized modifications, deletions, and could lead to a partial denial of service. Consequently, this vulnerability presents substantial risks to the integrity and confidentiality of accessible data across the affected versions.

References