Oracle WebCenter Portal vulnerabilities

61 known vulnerabilities in Oracle WebCenter Portal from Oracle. 61 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83065Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical co

• 9.1 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83064Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network acces

• 8.8 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83053Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 7.6 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83052Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network acces

• 7.5 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83051Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces

• 7.1 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83050Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.5 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83049Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network a

• 7.7 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83048Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.2 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83047Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces

• 7.1 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83046Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.5 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83045Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 9.6 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83043Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via

• 7.7 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83041Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acc

• 9.6 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83040Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 9.9 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83039Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 9.8 Critical severity

  Oracle WebCenter Portal: Improper Authentication

  CVE-2026-73963Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 8.8 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-73959Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 9.3 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-73957Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 9.8 Critical severity

  Oracle WebCenter Portal: Improper Authentication

  CVE-2026-73956Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via

• 9.8 Critical severity

  Oracle WebCenter Portal: Improper Authentication

  CVE-2026-73953Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 9.1 Critical severity

  Oracle WebCenter Portal: Improper Authentication

  CVE-2026-73952Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 8.1 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-73951Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network

• 8.8 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-73949Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acc

• 9.9 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-73948Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 9.8 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-70970Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces

• 8.6 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61230Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces

• 8.1 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61229Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network acc

• 8.6 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61228Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces

• 7.6 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61227Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.2 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61222Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces

• 8.7 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61219Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.7 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61215Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.8 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61213Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.5 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61212Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network acce

• 7.6 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61208Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 7.7 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61199Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to c

• 8.7 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61193Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network acc

• 8.1 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61177Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 7.1 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61124Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces

• 7.7 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-60733Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access vi