CVE-2018-3101

Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: Portlet Services). Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Portal accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

• http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/104820Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041310Third Party Advisory, VDB Entry
• http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/104820Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041310Third Party Advisory, VDB Entry

Published

Jul 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-3095Vulnerability in the Oracle Outside In Technology component …
• CVE-2018-3096Vulnerability in the Oracle Outside In Technology component …
• CVE-2018-3097Vulnerability in the Oracle Outside In Technology component …
• CVE-2018-3098Vulnerability in the Oracle Outside In Technology component …
• CVE-2018-3099Vulnerability in the Oracle Outside In Technology component …
• CVE-2018-3100Vulnerability in the Oracle Business Process Management Suit…
• CVE-2018-3102Vulnerability in the Oracle Outside In Technology component …
• CVE-2018-3103Vulnerability in the Oracle Outside In Technology component …
• CVE-2018-3104Vulnerability in the Oracle Outside In Technology component …
• CVE-2018-3105Vulnerability in the Oracle SOA Suite component of Oracle Fu…
• CVE-2018-3108Vulnerability in the Oracle Fusion Middleware component of O…
• CVE-2018-3109Vulnerability in the Oracle Fusion Middleware MapViewer comp…