CVE-2018-16952

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Interaction Portal version 10.3.3

Description The issue concerns the lack of protection against Cross-site Request Forgery in the design of the portal, which can lead to sensitive actions being performed, such as changing a portal user's password.

Recommendations For Oracle WebCenter Interaction Portal version 10.3.3, consider implementing additional security measures to protect against Cross-site Request Forgery, such as validating request tokens or using same-site cookies, as the product is out of support and no official patch is expected.