CyberSecBulletin

Oracle vulnerabilities

We track 3,014 vulnerabilities in Oracle products across 60+ products. 3,006 are rated high or critical, and 81 have been exploited in real attacks. The most recent was published on October 24, 2026.

3,014vulnerabilities
715critical
2,291high
81exploited
8.3average CVSS score

Latest Oracle vulnerabilities

  • 9.9 Critical severity

    Oracle WebCenter Portal: Improper Access Control

    CVE-2026-46814Oracle

    Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network a

  • 9.8 Critical severity

    Oracle WebCenter Content: Missing Authentication for Critical Functionality

    CVE-2026-46813Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

  • 9.1 Critical severity

    Oracle WebCenter Sites: Improper Access Control

    CVE-2026-46809Oracle

    Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

  • 8.7 High severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-46808Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to

  • 9.8 Critical severity

    Identity Manager: Missing Authentication for Critical Functionality

    CVE-2026-46807Oracle

    Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T

  • 8.2 High severity

    Oracle WebCenter Content: URL Redirection to Untrusted Site

    CVE-2026-46806Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS

  • 9.3 Critical severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-46805Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t

  • 8.7 High severity

    Oracle WebCenter Content: Improper Privilege Management

    CVE-2026-46804Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to

  • 10.0 Critical severity

    Oracle WebCenter Portal: Missing Authentication for Critical Functionality

    CVE-2026-46803Oracle

    Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network

  • 9.9 Critical severity

    Oracle WebCenter Portal: Improper Access Control

    CVE-2026-46802Oracle

    Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network a

  • 9.8 Critical severity

    Oracle WebCenter Sites: Missing Authentication for Critical Functionality

    CVE-2026-46801Oracle

    Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

  • 10.0 Critical severity

    Oracle WebCenter Sites: Missing Authentication for Critical Functionality

    CVE-2026-46800Oracle

    Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

  • 9.8 Critical severity

    Oracle WebCenter Sites: Missing Authentication for Critical Functionality

    CVE-2026-46799Oracle

    Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

  • 10.0 Critical severity

    Oracle WebCenter Sites: Missing Authentication for Critical Functionality

    CVE-2026-46798Oracle

    Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

  • 9.8 Critical severity

    Oracle WebCenter Sites: Improper Access Control

    CVE-2026-46797Oracle

    Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

  • 8.0 High severity

    Oracle WebCenter Sites: URL Redirection to Untrusted Site

    CVE-2026-46796Oracle

    Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acces

  • 9.3 Critical severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-46795Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t

  • 9.9 Critical severity

    Identity Manager Connector: Improper Privilege Management

    CVE-2026-46794Oracle

    Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Connector). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with ne

  • 9.9 Critical severity

    Identity Manager Connector: Improper Access Control

    CVE-2026-46793Oracle

    Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Database User). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network acc

  • 9.9 Critical severity

    Identity Manager Connector: Improper Access Control

    CVE-2026-46792Oracle

    Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Connector). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with ne

  • 7.5 High severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-46791Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t

  • 9.6 Critical severity

    Oracle WebCenter Content: Missing Authentication for Critical Functionality

    CVE-2026-46789Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t

  • 8.4 High severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-46788Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t

  • 8.0 High severity

    Oracle WebCenter Content: Cross-Site Request Forgery

    CVE-2026-46787Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP

  • 9.6 Critical severity

    Oracle WebCenter Content: Cross-Site Request Forgery

    CVE-2026-46786Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t

  • 9.3 Critical severity

    Oracle WebCenter Content: Cross-Site Request Forgery

    CVE-2026-46785Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t

  • 9.1 Critical severity

    WebCenter Content: Imaging: Improper Access Control

    CVE-2026-46784Oracle

    Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via

  • 9.8 Critical severity

    WebCenter Content: Imaging: Missing Authentication for Critical Functionality

    CVE-2026-46783Oracle

    Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via

  • 9.9 Critical severity

    Oracle WebCenter Enterprise Capture: Improper Access Control

    CVE-2026-46782Oracle

    Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with ne

  • 10.0 Critical severity

    Oracle WebCenter Enterprise Capture: Missing Authentication for Critical Functionality

    CVE-2026-46781Oracle

    Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with n

  • 8.8 High severity

    WebCenter Content: Imaging: Missing Authentication for Critical Functionality

    CVE-2026-46780Oracle

    Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via H

  • 9.9 Critical severity

    Oracle WebCenter Enterprise Capture: Improper Access Control

    CVE-2026-46779Oracle

    Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with ne

  • 10.0 Critical severity

    Oracle WebCenter Enterprise Capture: Missing Authentication for Critical Functionality

    CVE-2026-46778Oracle

    Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with n

  • 9.1 Critical severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-46777Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

  • 8.6 High severity

    Oracle Unified Directory: Improper Access Control

    CVE-2026-46776Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

  • 9.8 Critical severity

    Oracle Unified Directory: Improper Access Control

    CVE-2026-46774Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

  • 9.8 Critical severity

    Oracle Unified Directory: Improper Access Control

    CVE-2026-46773Oracle

    Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

  • 7.2 High severity

    Oracle Application Development Framework (ADF): Improper Access Control

    CVE-2026-46769Oracle

    Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Shared Components). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privile

  • 9.9 Critical severity

    Oracle WebCenter Portal: Improper Access Control

    CVE-2026-46767Oracle

    Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via

  • 9.8 Critical severity

    Oracle WebCenter Content: Improper Access Control

    CVE-2026-46766Oracle

    Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc