Oracle Webcenter Sites vulnerabilities
92 known vulnerabilities affecting oracle/webcenter_sites.
Total CVEs
92
CISA KEV
2
actively exploited
Public exploits
11
Exploited in wild
5
Severity breakdown
CRITICAL24HIGH44MEDIUM22LOW2
Vulnerabilities
Page 3 of 5
CVE-2026-60550P3HIGHCVSS 8.6v12.2.1.4.0v14.1.2.0.02026-07-21
CVE-2026-60550 [HIGH] CWE-284 CVE-2026-60550: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. While the vulnerability is in Oracle WebCen
nvd
CVE-2026-61033P3HIGHCVSS 8.6v12.2.1.4.0v14.1.2.0.02026-08-18
CVE-2026-61033 [HIGH] CWE-284 CVE-2026-61033: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability ca
nvd
CVE-2026-61045P3HIGHCVSS 8.6v12.2.1.4.0v14.1.2.0.02026-08-18
CVE-2026-61045 [HIGH] CWE-284 CVE-2026-61045: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability ca
nvd
CVE-2019-0228P3CRITICALCVSS 9.8v12.2.1.3.0v12.2.1.4.02019-04-17
CVE-2019-0228 [CRITICAL] CWE-611 CVE-2019-0228: Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent att
Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.
nvd
CVE-2026-60558P3HIGHCVSS 8.1v12.2.1.4.0v14.1.2.0.02026-07-21
CVE-2026-60558 [HIGH] CWE-200 CVE-2026-60558: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability
nvd
CVE-2017-3543P3HIGHCVSS 8.6v11.1.1.8.0v12.2.1.0.0+2 more2017-04-24
CVE-2017-3543 [HIGH] CVE-2017-3543: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Ser
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vuln
nvd
CVE-2017-3542P3HIGHCVSS 8.6v11.1.1.8.0v12.2.1.0.0+2 more2017-04-24
CVE-2017-3542 [HIGH] CVE-2017-3542: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Ser
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vuln
nvd
CVE-2026-61034P3CRITICALCVSS 9.1v12.2.1.4.0v14.1.2.0.02026-08-18
CVE-2026-61034 [CRITICAL] CWE-284 CVE-2026-61034: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. While the vulnerability is in Oracle We
nvd
CVE-2026-61038P3HIGHCVSS 8.2v12.2.1.4.0v14.1.2.0.02026-08-18
CVE-2026-61038 [HIGH] CWE-284 CVE-2026-61038: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability ca
nvd
CVE-2026-61054P3HIGHCVSS 8.2v12.2.1.4.0v14.1.2.0.02026-08-18
CVE-2026-61054 [HIGH] CWE-284 CVE-2026-61054: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability ca
nvd
CVE-2017-3540P3HIGHCVSS 8.6v11.1.1.8.0v12.2.1.0.0+2 more2017-04-24
CVE-2017-3540 [HIGH] CVE-2017-3540: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Ser
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vuln
nvd
CVE-2019-2579P4MEDIUMCVSS 4.3PoCv12.2.1.3.02019-04-23
CVE-2019-2579 [MEDIUM] CVE-2019-2579: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Adv
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthoriz
nvd
CVE-2017-3541P3HIGHCVSS 8.2v11.1.1.8.0v12.2.1.0.0+2 more2017-04-24
CVE-2017-3541 [HIGH] CVE-2017-3541: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Ser
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vuln
nvd
CVE-2026-61016P3HIGHCVSS 8.2v12.2.1.4.0v14.1.2.0.02026-08-18
CVE-2026-61016 [HIGH] CWE-284 CVE-2026-61016: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability ca
nvd
CVE-2026-61011P3HIGHCVSS 8.2v12.2.1.4.0v14.1.2.0.02026-08-18
CVE-2026-61011 [HIGH] CWE-284 CVE-2026-61011: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability ca
nvd
CVE-2026-60554P3HIGHCVSS 7.5v12.2.1.4.0v14.1.2.0.02026-07-21
CVE-2026-60554 [HIGH] CWE-200 CVE-2026-60554: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability ca
nvd
CVE-2026-61007P3HIGHCVSS 7.5v12.2.1.4.0v14.1.2.0.02026-08-18
CVE-2026-61007 [HIGH] CWE-284 CVE-2026-61007: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability ca
nvd
CVE-2017-3545P3HIGHCVSS 8.2v11.1.1.8.0v12.2.1.0.0+2 more2017-04-24
CVE-2017-3545 [HIGH] CVE-2017-3545: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Blo
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Blob Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this
nvd
CVE-2017-3602P3HIGHCVSS 8.1v11.1.1.8.0v12.2.1.0.0+2 more2017-04-24
CVE-2017-3602 [HIGH] CVE-2017-3602: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Adv
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this
nvd
CVE-2017-3554P3HIGHCVSS 8.1v11.1.1.8.0v12.2.1.0.0+2 more2017-04-24
CVE-2017-3554 [HIGH] CVE-2017-3554: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Cat
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of thi
nvd