Oracle Webcenter Portal vulnerabilities

CVE-2026-46846 [CRITICAL] CWE-306 CVE-2026-46846: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Securit Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Orac

CVE-2026-73956 [CRITICAL] CWE-287 CVE-2026-73956: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Compose Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can

CVE-2026-73963 [CRITICAL] CWE-287 CVE-2026-73963: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerabi

CVE-2026-73953 [CRITICAL] CWE-287 CVE-2026-73953: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerabi

CVE-2026-70970 [CRITICAL] CWE-284 CVE-2026-70970: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerabilit

CVE-2026-60566 [CRITICAL] CWE-269 CVE-2026-60566: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerabilit

CVE-2021-21343 [HIGH] CWE-73 CVE-2021-21343: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4. XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the proc

CVE-2026-83039 [CRITICAL] CWE-284 CVE-2026-83039: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Compose Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCente

CVE-2026-73948 [CRITICAL] CWE-284 CVE-2026-73948: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Compose Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCente

CVE-2018-14718 [CRITICAL] CWE-502 CVE-2018-14718: FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code b FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.

CVE-2026-46802 [CRITICAL] CWE-284 CVE-2026-46802: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Securit Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracl

CVE-2026-46814 [CRITICAL] CWE-284 CVE-2026-46814: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Securit Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracl

CVE-2026-83036 [CRITICAL] CWE-287 CVE-2026-83036: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerabilit

CVE-2026-83037 [CRITICAL] CWE-287 CVE-2026-83037: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerabilit

CVE-2026-83035 [CRITICAL] CWE-287 CVE-2026-83035: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerabilit

CVE-2026-83031 [CRITICAL] CWE-284 CVE-2026-83031: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. While the vulnerability is in Oracle Web

CVE-2026-60730 [CRITICAL] CWE-284 CVE-2026-60730: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Compose Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCente

CVE-2026-60561 [CRITICAL] CWE-284 CVE-2026-60561: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle Web

CVE-2026-60565 [CRITICAL] CWE-284 CVE-2026-60565: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle Web

CVE-2026-60562 [CRITICAL] CWE-284 CVE-2026-60562: Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle Web