CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects Oracle.
CVE
CVE-2018-16953
Severity
MEDIUM
CVSS
6.1
EPSS
0.82%
Oracle
Original NVD Description
The AjaxView::DisplayResponse() function of the portalpages.dll assembly in Oracle WebCenter Interaction Portal 10.3.3 is vulnerable to reflected cross-site scripting (XSS). User input from the name parameter is unsafely reflected in the server response. NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle WebCenter Interaction Portal is out of support.
Related CVEs
Other vulnerabilities affecting the same vendor(s)