VULNERABILITY INTELLIGENCE

CVE-2018-16954

CVSS score6.1 MEDIUM

EPSS probability1.07%

CISA KEVNot currently listed

Published2018-09-18

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

An issue was discovered in Oracle WebCenter Interaction Portal 10.3.3. The login function of the portal is vulnerable to insecure redirection (also called an open redirect). The in_hi_redirect parameter is not validated by the application after a successful login. NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle WebCenter Interaction Portal is out of support.

Weakness classification

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Primary references

cve@mitre.org — Third Party Advisory, VDB Entry
cve@mitre.org — Exploit, Mailing List, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Patch, Third Party Advisory