Is CVE-2018-2791 known to be exploited?

9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Oracle Corporation Webcenter Sites

CVE-2018-2791

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthen…

EPSS: 0.870 (99.5th percentile) — read the EPSS interpretation.

Affected products

Oracle Corporation Webcenter Sites — versions 11.1.1.8.0, 12.2.1.2.0, 12.2.1.3.0

Public proof-of-concept exploits

References

1040695 (vdb-entry, x_refsource_SECTRACK)
www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html (x_refsource_CONFIRM)
44752 (exploit, x_refsource_EXPLOIT-DB)
103800 (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2018-2791?: CVE-2018-2791 is a vulnerability in Oracle Corporation Webcenter Sites. Published 2018-04-19.
Is CVE-2018-2791 known to be exploited?: 9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.