Oracle WebCenter Sites vulnerabilities

48 known vulnerabilities in Oracle WebCenter Sites from Oracle. 48 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Oracle WebCenter Sites: Missing Authentication for Critical Functionality

  CVE-2026-46799Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 10.0 Critical severity

  Oracle WebCenter Sites: Missing Authentication for Critical Functionality

  CVE-2026-46798Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.8 Critical severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-46797Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 8.0 High severity

  Oracle WebCenter Sites: URL Redirection to Untrusted Site

  CVE-2026-46796Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 8.8 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-35318Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 9.8 Critical severity

  Oracle WebCenter Sites: Missing Authentication for Critical Functionality

  CVE-2026-35296Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 7.5 High severity

  Oracle WebCenter Sites: Missing Authentication for Critical Functionality

  CVE-2026-35295Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network acc

• 9.8 Critical severity

  Oracle WebCenter Sites: Missing Authentication for Critical Functionality

  CVE-2026-35293Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to