WebCenter Portal vulnerabilities

67 known vulnerabilities in WebCenter Portal from Oracle. 67 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83052Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network acces

• 7.5 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83051Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces

• 7.1 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83050Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.5 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83049Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network a

• 7.7 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83048Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.2 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83047Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces

• 7.1 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83046Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.5 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83045Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 9.6 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83043Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via

• 7.7 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83041Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acc

• 9.6 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83040Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 9.9 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-83039Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 9.8 Critical severity

  Oracle WebCenter Sites: Improper Authentication

  CVE-2026-83037Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.8 Critical severity

  Oracle WebCenter Sites: Improper Authentication

  CVE-2026-83036Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.8 Critical severity

  Oracle WebCenter Sites: Improper Authentication

  CVE-2026-83035Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 7.5 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-83034Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 8.8 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-83033Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 8.8 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-83032Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 9.9 Critical severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-83031Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 9.8 Critical severity

  Oracle WebCenter Portal: Improper Authentication

  CVE-2026-73963Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 8.8 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-73959Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 9.3 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-73957Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 9.8 Critical severity

  Oracle WebCenter Portal: Improper Authentication

  CVE-2026-73956Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via

• 9.8 Critical severity

  Oracle WebCenter Portal: Improper Authentication

  CVE-2026-73953Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 9.1 Critical severity

  Oracle WebCenter Portal: Improper Authentication

  CVE-2026-73952Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 8.1 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-73951Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network

• 8.8 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-73949Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acc

• 9.9 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-73948Sep 15, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 9.8 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-70970Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces

• 8.6 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61230Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces

• 8.1 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61229Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network acc

• 8.6 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61228Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces

• 7.6 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61227Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.2 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61222Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces

• 8.7 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61219Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.7 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61215Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.8 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61213Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.5 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61212Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network acce

• 7.6 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61208Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 7.7 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61199Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to c