WebCenter Sites vulnerabilities

43 known vulnerabilities in WebCenter Sites from Oracle. 42 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle WebCenter Sites: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-91552Oct 20, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 7.5 High severity

  Oracle WebCenter Sites: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-91542Oct 20, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.8 Critical severity

  Oracle WebCenter Sites: Improper Authentication

  CVE-2026-101499Oct 20, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 8.8 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61058Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 8.2 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61054Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 8.6 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61045Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 8.8 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61042Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 8.8 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61040Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 8.2 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61038Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.1 Critical severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61034Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network acce

• 8.6 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61033Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 8.8 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61032Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 9.0 Critical severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61029Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network ac

• 8.8 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61022Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 9.9 Critical severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61021Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 9.8 Critical severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61018Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 8.8 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61017Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 8.2 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61016Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 8.2 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61011Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.1 Critical severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61008Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 7.5 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61007Aug 18, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.8 Critical severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-61140Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to

• 8.1 High severity

  Oracle WebCenter Sites: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-60558Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network ac

• 8.6 High severity

  Oracle WebCenter Sites: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-60556Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.8 Critical severity

  Oracle WebCenter Sites: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-60555Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 7.5 High severity

  Oracle WebCenter Sites: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-60554Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 8.7 High severity

  Oracle WebCenter Sites: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-60553Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network ac

• 9.9 Critical severity

  Oracle WebCenter Sites: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-60552Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 9.8 Critical severity

  Oracle WebCenter Sites: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-60551Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 8.6 High severity

  Oracle WebCenter Sites: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-60550Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.1 Critical severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-46809Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.8 Critical severity

  Oracle WebCenter Sites: Missing Authentication for Critical Functionality

  CVE-2026-46801Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 10.0 Critical severity

  Oracle WebCenter Sites: Missing Authentication for Critical Functionality

  CVE-2026-46800Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.8 Critical severity

  Oracle WebCenter Sites: Missing Authentication for Critical Functionality

  CVE-2026-46799Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 10.0 Critical severity

  Oracle WebCenter Sites: Missing Authentication for Critical Functionality

  CVE-2026-46798Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 9.8 Critical severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-46797Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 8.0 High severity

  Oracle WebCenter Sites: URL Redirection to Untrusted Site

  CVE-2026-46796Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 8.8 High severity

  Oracle WebCenter Sites: Improper Access Control

  CVE-2026-35318Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 9.8 Critical severity

  Oracle WebCenter Sites: Missing Authentication for Critical Functionality

  CVE-2026-35296Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 7.5 High severity

  Oracle WebCenter Sites: Missing Authentication for Critical Functionality

  CVE-2026-35295Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network acc