oracle.comConfirmation
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html CVE-2018-2791
HIGHNuclei
Oracle WebCenter Sites 11.1.1.8.0/12.2.1.x - Cross-Site Scripting
Record summary
CVE-2018-2791 has a selected CVSS score of 8.2 (high); EIP currently links 1 catalogued exploit and 1 Nuclei template.
Description
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).
Description source: CVE List
Exploitation context
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
WebCenter SitesBrowse Oracle Corporation / WebCenter Sites | CVE List | 11.1.1.8.0 | affected |
| 12.2.1.2.0 | affected | ||
| 12.2.1.3.0 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBOracle WebCenter Sites 11.1.1.8.0/12.2.1.x - Cross-Site ScriptingExploitDB exploitby Richard AlviarezNot analyzed1 file
Nuclei templates
1ProjectDiscoveryHIGHOracle Fusion Middleware WebCenter Sites - Cross-Site ScriptingCVSS 8.2
The Oracle WebCenter Sites component of Oracle Fusion Middleware is susceptible to multiple instances of cross-site scripting that could allow unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Sites. Impacted versions that are affected are 11.1.1.8.0, 12.2.1.2.0 and 12.2.1.3.0. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data.
Impact
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary script code in the context of the targeted user's browser, potentially leading to session hijacking, defacement, or theft of sensitive information.
Remediation
Apply the latest security patches provided by Oracle to address this vulnerability.
Authorsmadrobot, leovalcante
Template tagscve2018cveedboraclexsswcsvuln
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
CPE: cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html http://web.archive.org/web/20211206165005/https://securitytracker.com/id/1040695 https://www.exploit-db.com/exploits/44752/ https://outpost24.com/blog/Vulnerabilities-discovered-in-Oracle-WebCenter-Sites https://nvd.nist.gov/vuln/detail/CVE-2018-2791
Source: ProjectDiscovery
References
5103800vdb entry
http://www.securityfocus.com/bid/103800 1040695vdb entry
http://www.securitytracker.com/id/1040695 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-2791 44752exploit
https://www.exploit-db.com/exploits/44752