CVE-2026-83043 is a critical vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to compromise the portal, requiring user interaction from a third party. Successful exploitation can lead to full takeover of Oracle WebCenter Portal and may impact additional Oracle products. The vulnerability has a CVSS 3.1 base score of 9.6, indicating high confidentiality, integrity, and availability impacts. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update advisory.
CVE-2026-83041 is a high-severity vulnerability in Oracle WebCenter Portal (component: Portlet Services) affecting versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the portal, potentially gaining unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 7.7, indicating significant confidentiality impact without affecting integrity or availability. The vulnerability may also impact additional Oracle products due to scope change. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.
CVE-2026-83040 is a critical vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via SOAP to compromise the portal. Successful exploitation requires human interaction from a person other than the attacker and can lead to full takeover of the Oracle WebCenter Portal. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 9.6. Oracle has included this vulnerability in their September 2026 Critical Security Patch Update.
CVE-2026-83039 is a critical vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the portal, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS score of 9.9. Attacks may also affect additional Oracle products due to scope change. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update advisory.
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-73959 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the portal, potentially leading to full takeover. The vulnerability affects confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has included fixes for this vulnerability in its September 2026 Critical Security Patch Update.
CVE-2026-73957 is a critical vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to compromise the portal, requiring user interaction from someone other than the attacker. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Oracle WebCenter Portal and potentially impact additional Oracle products. The vulnerability has a CVSS 3.1 base score of 9.3, indicating high confidentiality and integrity impact with no availability impact.
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Portal accessible data as well as unauthorized access to critical data or complete access to all Oracle WebCenter Portal accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
CVE-2026-73951 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to potentially take over the Oracle WebCenter Portal. The vulnerability affects confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.1. Oracle has released security patches addressing this vulnerability as part of its September 2026 Critical Security Patch Update.
CVE-2026-73949 is a high-severity vulnerability in Oracle WebCenter Portal affecting versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the portal, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has included fixes for this vulnerability in their September 2026 Critical Security Patch Update.
CVE-2026-73948 is a critical vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS score of 9.9. Attacks exploiting this flaw may also affect additional Oracle products due to scope change. Oracle has released security patches addressing this vulnerability as part of its September 2026 Critical Security Patch Update.
CVE-2026-70970 is a critical vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to fully compromise the portal, resulting in complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has acknowledged this vulnerability in their August 2026 Critical Security Patch Update advisory and strongly recommends applying patches promptly. No specific patch links were provided in the input, but Oracle's advisory is the authoritative source for remediation information.
CVE-2026-61230 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to compromise the portal, potentially gaining unauthorized access to critical or all accessible data. The vulnerability impacts confidentiality but not integrity or availability. Oracle has released security patches addressing this and recommends applying them promptly.
CVE-2026-61229 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the portal, leading to full takeover. The vulnerability is difficult to exploit but impacts confidentiality, integrity, and availability. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products.
CVE-2026-61228 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to compromise the portal, potentially gaining unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 8.6, indicating a significant confidentiality impact. Attacks exploiting this vulnerability may also affect additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update in August 2026 addressing this and many other vulnerabilities.
CVE-2026-61227 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the portal, requiring user interaction from a third party. Successful exploitation can lead to unauthorized access to critical data and limited unauthorized modification of data. The vulnerability has a CVSS 3.1 base score of 7.6, indicating significant confidentiality and integrity impacts. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which provides security patches for affected products.
CVE-2026-61222 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to compromise the portal, requiring user interaction from a third party. Successful exploitation can lead to unauthorized access to critical data and partial unauthorized modification of data. The vulnerability impacts confidentiality and integrity but not availability. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities.
CVE-2026-61219 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the product, requiring user interaction from a third party. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Oracle WebCenter Portal, with potential impact extending to other Oracle products. The vulnerability has a CVSS 3.1 base score of 8.7, indicating significant confidentiality and integrity impacts. Oracle has published a Critical Security Patch Update addressing this and many other vulnerabilities. Users are strongly advised to apply the official patches promptly.