A critical vulnerability (CVE-2026-83064) exists in Oracle WebCenter Portal component of Oracle Fusion Middleware, affecting versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows a high privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 9.1. Oracle has released security patches addressing this and many other vulnerabilities in its September 2026 Critical Security Patch Update.
A high-severity vulnerability exists in Oracle WebCenter Portal (component: Runtime Tools) versions 12.2.1.4.0 and 14.1.2.0.0. This network-exploitable flaw allows a low-privileged attacker to compromise the portal without user interaction, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.
A vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects supported versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within Oracle WebCenter Portal. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.
A vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data or perform unauthorized updates, inserts, or deletes on accessible data. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity.
A vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data and perform unauthorized updates, inserts, or deletes on accessible data. The CVSS 3.1 base score is 8.2, indicating high severity with significant confidentiality and integrity impacts. Oracle has released security patches addressing this vulnerability as part of its September 2026 Critical Security Patch Update.
A vulnerability exists in Oracle WebCenter Portal (component: Runtime Tools) versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the portal, potentially resulting in unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 7.7, indicating high severity, with confidentiality impact but no integrity or availability impact. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.
A vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects supported versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows a low privileged attacker with network access via HTTP to compromise the portal, potentially leading to unauthorized access and modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high severity with significant confidentiality and integrity impacts. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update advisory.