Threats affecting pkg:maven/com.oracle.webcenter/portlet-services

A critical vulnerability (CVE-2026-83040) exists in Oracle WebCenter Portal component Portlet Services affecting versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via SOAP to potentially take over the Oracle WebCenter Portal. Exploitation requires user interaction by a person other than the attacker and can impact additional products beyond WebCenter Portal. The vulnerability has a CVSS 3.1 base score of 9.6, indicating high confidentiality, integrity, and availability impact.