CVE-2019-2578 is an easily exploitable vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware, specifically version 12.2.1.3.0. An unauthenticated attacker can compromise the system via HTTP network access, potentially impacting additional products beyond WebCenter Sites. This vulnerability carries a high CVSS 3.0 base score of 8.6, indicating a significant risk of unauthorized access to critical or all accessible data due to its network attack vector and low attack complexity. While there is no evidence of active exploitation, Metasploit modules, or ExploitDB entries, a Nuclei template for "Broken Access Control" exists, and the CVE has minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
12.2.1.3.0CPE matchmatch criteria | cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.