Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2018-2791

5 documents5 sources
Severity
8.2HIGH
EPSS
87.0%
top 0.56%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Oracle Corporation Webcenter SitesOracle Webcenter Sites
Timeline
PublishedApr 19
Latest updateMay 13

Description

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact add…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:NExploitability: 2.8 | Impact: 4.7

Affected Packages2 packages

▶NVDoracle/webcenter_sites11.1.1.8.0, 12.2.1.2.0, 12.2.1.3.0+2
▶CVEListV5oracle_corporation/webcenter_sites11.1.1.8.0, 12.2.1.2.0, 12.2.1.3.0+2

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-p8p6-rvh2-gwj9: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI)↗2022-05-13
▶
CVEList
CVE-2018-2791: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI)↗2018-04-19
▶

💥Exploits & PoCs

2
Exploit-DB
Oracle WebCenter Sites 11.1.1.8.0/12.2.1.x - Cross-Site Scripting↗2018-05-25
▶
Nuclei
Oracle Fusion Middleware WebCenter Sites - Cross-Site Scripting
▶