CVE-2018-16956

The AjaxControl component of Oracle WebCenter Interaction Portal 10.3.3 does not validate the names of pages when processing page rename requests. Pages can be renamed to include characters unsupported for URIs by the web server hosting the WCI Portal software (such as IIS). Renaming pages to include unsupported characters, such as 0x7f, prevents these pages from being accessed over the web server, causing a Denial of Service (DoS) to the page. NOTE: this CVE is assigned by MITRE and isn't validated by Oracle because Oracle WebCenter Interaction Portal is out of support.

• CWE-20

• http://www.securityfocus.com/bid/105350Third Party Advisory, VDB Entry
• https://seclists.org/fulldisclosure/2018/Sep/22Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/105350Third Party Advisory, VDB Entry
• https://seclists.org/fulldisclosure/2018/Sep/22Mailing List, Third Party Advisory

Published

Sep 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16950Inteno DG400 WU7U_ELION3.11.6-170614_1328 devices allow remo…
• CVE-2018-16951xunfeng 0.2.0 allows command execution via CSRF because mass…
• CVE-2018-16952The Oracle WebCenter Interaction Portal 10.3.3 does not impl…
• CVE-2018-16953The AjaxView::DisplayResponse() function of the portalpages.…
• CVE-2018-16954An issue was discovered in Oracle WebCenter Interaction Port…
• CVE-2018-16955The login function of Oracle WebCenter Interaction Portal 10…
• CVE-2018-16957The Oracle WebCenter Interaction 10.3.3 search service query…
• CVE-2018-16958An issue was discovered in Oracle WebCenter Interaction Port…
• CVE-2018-16959An issue was discovered in Oracle WebCenter Interaction Port…
• CVE-2018-16960An issue was discovered in Open XDMoD through 7.5.0. html/gu…
• CVE-2018-16961An issue was discovered in Open XDMoD through 7.5.0. html/gu…
• CVE-2018-16962Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles a…