Threats affecting pkg:maven/com.oracle.webcenter/portal

61 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.5%	CVE-2026-46845Oracle WebCenter Portal · Missing Authentication Critical9.8EPSS 0.5%2026-06-16CVE Database V5CVE-2026-46845 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). EPSS 0.5%Vulnerability CWE-306	CVE Database V5	2026-06-16
Critical	9.9	EPSS 0.4%	CVE-2026-46814Oracle WebCenter Portal · Improper Access Control Critical9.9EPSS 0.4%2026-06-16CVE Database V5CVE-2026-46814 CVE-2026-46814 is a critical vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the portal, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 9.9. Attacks may also affect additional Oracle products due to scope change. Oracle strongly recommends applying security patches promptly to mitigate this risk. EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-06-16
Critical	10.0	EPSS 0.5%	CVE-2026-46803Oracle WebCenter Portal · Missing Authentication Critical10.0EPSS 0.5%2026-06-16CVE Database V5CVE-2026-46803 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). EPSS 0.5%Vulnerability CWE-306	CVE Database V5	2026-06-16
Critical	9.9	EPSS 0.4%	CVE-2026-46802Oracle WebCenter Portal · Improper Access Control Critical9.9EPSS 0.4%2026-06-16CVE Database V5CVE-2026-46802 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-06-16
Critical	9.9	EPSS 0.4%	CVE-2026-46767Oracle WebCenter Portal · Improper Access Control Critical9.9EPSS 0.4%2026-06-16CVE Database V5CVE-2026-46767 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-06-16
Critical	9.9	EPSS 0.4%	CVE-2026-46765Oracle WebCenter Portal · Improper Access Control Critical9.9EPSS 0.4%2026-06-16CVE Database V5CVE-2026-46765 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-06-16

Page 4 of 4