Oracle WebCenter Portal vulnerabilities

61 known vulnerabilities in Oracle WebCenter Portal from Oracle. 61 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

61vulnerabilities

29critical

32high

0exploited

8.9average CVSS score

Latest first

8.8 High severity
Oracle WebCenter Portal: Missing Authentication for Critical Functionality
CVE-2026-60731Aug 18, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via
9.9 Critical severity
Oracle WebCenter Portal: Improper Access Control
CVE-2026-60730Aug 18, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via
8.8 High severity
Oracle WebCenter Portal: Improper Access Control
CVE-2026-60729Aug 18, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via
9.1 Critical severity
Oracle WebCenter Portal: Improper Access Control
CVE-2026-60728Aug 18, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac
9.9 Critical severity
Oracle WebCenter Portal: Improper Authentication
CVE-2026-60568Jul 21, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access
9.8 Critical severity
Oracle WebCenter Portal: Improper Privilege Management
CVE-2026-60566Jul 21, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces
9.9 Critical severity
Oracle WebCenter Portal: Improper Access Control
CVE-2026-60565Jul 21, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access
9.6 Critical severity
Oracle WebCenter Portal: Improper Access Control
CVE-2026-60564Jul 21, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access
8.8 High severity
Oracle WebCenter Portal: Improper Access Control
CVE-2026-60563Jul 21, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access
9.9 Critical severity
Oracle WebCenter Portal: Improper Access Control
CVE-2026-60562Jul 21, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access
9.9 Critical severity
Oracle WebCenter Portal: Improper Access Control
CVE-2026-60561Jul 21, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access
9.9 Critical severity
Oracle WebCenter Portal: Improper Access Control
CVE-2026-46847Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access
10.0 Critical severity
Oracle WebCenter Portal: Missing Authentication for Critical Functionality
CVE-2026-46846Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
9.8 Critical severity
Oracle WebCenter Portal: Missing Authentication for Critical Functionality
CVE-2026-46845Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
9.9 Critical severity
Oracle WebCenter Portal: Improper Access Control
CVE-2026-46844Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network a
9.9 Critical severity
Oracle WebCenter Portal: Improper Access Control
CVE-2026-46838Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network a
9.9 Critical severity
Oracle WebCenter Portal: Improper Access Control
CVE-2026-46814Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network a
10.0 Critical severity
Oracle WebCenter Portal: Missing Authentication for Critical Functionality
CVE-2026-46803Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network
9.9 Critical severity
Oracle WebCenter Portal: Improper Access Control
CVE-2026-46802Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network a
9.9 Critical severity
Oracle WebCenter Portal: Improper Access Control
CVE-2026-46767Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via
9.9 Critical severity
Oracle WebCenter Portal: Improper Access Control
CVE-2026-46765Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via