Threat Intelligence Database

CVE-2026-70970 is a critical vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to fully compromise the portal, resulting in complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has acknowledged this vulnerability in their August 2026 Critical Security Patch Update advisory and strongly recommends applying patches promptly. No specific patch links were provided in the input, but Oracle's advisory is the authoritative source for remediation information.

CVE-2026-61230 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to compromise the portal, potentially gaining unauthorized access to critical or all accessible data. The vulnerability impacts confidentiality but not integrity or availability. Oracle has released security patches addressing this and recommends applying them promptly.

CVE-2026-61229 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the portal, leading to full takeover. The vulnerability is difficult to exploit but impacts confidentiality, integrity, and availability. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products.

CVE-2026-61228 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to compromise the portal, potentially gaining unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 8.6, indicating a significant confidentiality impact. Attacks exploiting this vulnerability may also affect additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update in August 2026 addressing this and many other vulnerabilities.

CVE-2026-61227 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the portal, requiring user interaction from a third party. Successful exploitation can lead to unauthorized access to critical data and limited unauthorized modification of data. The vulnerability has a CVSS 3.1 base score of 7.6, indicating significant confidentiality and integrity impacts. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which provides security patches for affected products.

CVE-2026-61222 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to compromise the portal, requiring user interaction from a third party. Successful exploitation can lead to unauthorized access to critical data and partial unauthorized modification of data. The vulnerability impacts confidentiality and integrity but not availability. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities.

CVE-2026-61219 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the product, requiring user interaction from a third party. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Oracle WebCenter Portal, with potential impact extending to other Oracle products. The vulnerability has a CVSS 3.1 base score of 8.7, indicating significant confidentiality and integrity impacts. Oracle has published a Critical Security Patch Update addressing this and many other vulnerabilities. Users are strongly advised to apply the official patches promptly.

CVE-2026-61215 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the portal, requiring user interaction from a different person. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Oracle WebCenter Portal and potentially impact additional Oracle products. The vulnerability has a CVSS 3.1 base score of 8.7, indicating high confidentiality and integrity impacts but no availability impact. Oracle has published a Critical Security Patch Update addressing this and many other vulnerabilities, strongly recommending patching. No known exploits are reported in the wild at this time.

CVE-2026-61213 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the portal, potentially leading to full takeover. The vulnerability affects confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has released a Critical Security Patch Update in August 2026 addressing this and many other vulnerabilities. Users are strongly advised to apply the official patches promptly.

CVE-2026-61212 is a high-severity vulnerability in Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to potentially take over the Oracle WebCenter Portal. The vulnerability impacts confidentiality, integrity, and availability, and may affect additional Oracle products due to scope change. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities.