CVE-2018-2791: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).

Security readout for executives and security teams

CVE-2018-2791 affects Oracle WebCenter Sites. An unauthenticated attacker who can reach the service over HTTP could compromise sensitive data and change some data, but the attack also requires interaction from another user. The business concern is high because successful exploitation can expose critical information and affect related products. Exposure is most likely where affected Oracle WebCenter Sites versions are reachable over HTTP, especially administrative or Advanced UI surfaces accessible to users who could be induced to interact with malicious content. Prioritize remediation for internet-facing or broadly accessible WebCenter Sites deployments. The vulnerability has high data exposure potential, public exploit references, and no required attacker authentication, even though user interaction is required. Mitigation focus: Apply Oracle guidance from the April 2018 Critical Patch Update.; Confirm affected WebCenter Sites versions are upgraded or patched.; Limit HTTP exposure to trusted networks where operationally possible..

Prepared

Jun 7, 2026, 13:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.