CVE-2018-16954

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Interaction Portal version 10.3.3

Description The login function of the portal is vulnerable to insecure redirection, also known as an open redirect. The in hi redirect parameter is not validated by the application after a successful login.

Recommendations For Oracle WebCenter Interaction Portal version 10.3.3, as a temporary workaround, consider validating the in hi redirect parameter after a successful login to prevent insecure redirection. However, since Oracle WebCenter Interaction Portal is out of support, at the moment, there is no information about a newer version that contains a fix for this issue.