CVE-2026-46801 is a critical vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to fully compromise the affected product, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update advisory and strongly recommends applying patches promptly. No explicit patch version is stated in the advisory content provided, but Oracle urges customers to apply the Critical Security Patch Update without delay. Mitigation may include blocking required network protocols or restricting privileges, though these can impact functionality.
CVE-2026-46800 is a critical vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to fully compromise Oracle WebCenter Sites, potentially leading to complete takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS score of 10.0. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update but has not explicitly stated patch availability for these specific versions in the advisory. Oracle strongly recommends applying the Critical Security Patch Update promptly to mitigate the risk. Temporary risk reduction may be possible by blocking required network protocols or restricting privileges, but these may affect application functionality.
CVE-2026-46799 is a critical vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to fully compromise the product, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products. Oracle strongly recommends applying the provided patches promptly to mitigate the risk. No specific patch version for WebCenter Sites is explicitly detailed in the advisory content, so users should consult the official patch availability documentation linked by Oracle. Until patches are applied, risk reduction may be possible by blocking required network protocols or restricting privileges, though these may impact functionality.
CVE-2026-46798 is a critical vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 that allows an unauthenticated attacker with network access via HTTP to fully compromise the product. Successful exploitation can lead to complete takeover of Oracle WebCenter Sites and may impact additional Oracle products. The vulnerability has a CVSS 3.1 base score of 10.0, indicating high confidentiality, integrity, and availability impacts. Oracle has acknowledged the vulnerability in its June 2026 Critical Security Patch Update advisory but has not explicitly stated patch availability for this specific issue. Oracle strongly recommends applying security patches promptly and suggests network-level mitigations until patches are applied.
CVE-2026-46797 is a critical vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to fully compromise the affected system, potentially resulting in complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update advisory, strongly recommending prompt patch application. No explicit patch version is stated in the advisory content provided, but Oracle urges customers to apply the Critical Security Patch Update without delay. Mitigations include blocking network protocols required by the attack and restricting privileges where possible, though these may impact functionality.
CVE-2026-46796 is a high-severity vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the product, requiring user interaction from a person other than the attacker. Successful exploitation can lead to full takeover of Oracle WebCenter Sites, impacting confidentiality, integrity, and availability. Oracle has acknowledged the vulnerability in its June 2026 Critical Security Patch Update advisory but has not explicitly confirmed patch availability for these versions. Oracle strongly recommends applying security patches promptly and suggests mitigating risk by blocking required network protocols or restricting privileges until patches are applied.
CVE-2026-35318 is a high-severity vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially resulting in a full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update advisory and strongly recommends applying the patches promptly. Workarounds such as blocking network protocols or removing unnecessary privileges may reduce risk temporarily but could affect functionality. No explicit patch links or fixed versions are provided in the input data, so patch status should be confirmed via the vendor advisory.
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data as well as unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).