漏洞描述
The Oracle WebCenter Sites 11.1.1.8.0 component of Oracle Fusion Middleware is impacted by easily exploitable cross-site scripting vulnerabilities that allow high privileged attackers with network access via HTTP to compromise Oracle WebCenter Sites.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
outpost24.comhttps://outpost24.com/blog/Vulnerabilities-discovered-in-Oracle-WebCenter-Sites↗www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2018.html↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2018-3238↗www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html↗github.comhttps://github.com/ARPSyndicate/kenzer-templates↗