WebCenter Portal vulnerabilities

67 known vulnerabilities in WebCenter Portal from Oracle. 67 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61193Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network acc

• 8.1 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61177Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 7.1 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-61124Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces

• 7.7 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-60733Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access vi

• 8.8 High severity

  Oracle WebCenter Portal: Missing Authentication for Critical Functionality

  CVE-2026-60731Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 9.9 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-60730Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 8.8 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-60729Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 9.1 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-60728Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 9.9 Critical severity

  Oracle WebCenter Portal: Improper Authentication

  CVE-2026-60568Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 9.8 Critical severity

  Oracle WebCenter Portal: Improper Privilege Management

  CVE-2026-60566Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces

• 9.9 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-60565Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 9.6 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-60564Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 8.8 High severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-60563Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 9.9 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-60562Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 9.9 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-60561Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 9.9 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-46847Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access

• 10.0 Critical severity

  Oracle WebCenter Portal: Missing Authentication for Critical Functionality

  CVE-2026-46846Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network

• 9.8 Critical severity

  Oracle WebCenter Portal: Missing Authentication for Critical Functionality

  CVE-2026-46845Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network

• 9.9 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-46844Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network a

• 9.9 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-46838Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network a

• 9.9 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-46814Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network a

• 10.0 Critical severity

  Oracle WebCenter Portal: Missing Authentication for Critical Functionality

  CVE-2026-46803Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network

• 9.9 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-46802Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network a

• 9.9 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-46767Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 9.9 Critical severity

  Oracle WebCenter Portal: Improper Access Control

  CVE-2026-46765Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 8.5 High severity

  XStream Remote Code Execution Exploited

  CVE-2021-39144Aug 23, 2021X-streamEPSS 98.1%

  XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affect

• 9.8 Critical severity

  Oracle Multiple Products Remote Code Execution Exploited

  CVE-2020-2555Jan 15, 2020OracleEPSS 97.1%

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticat