Threat Intelligence Database

CVE-2026-61054 is a high-severity vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data within Oracle WebCenter Sites. The attacker can also perform unauthorized update, insert, or delete operations on some accessible data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating significant confidentiality and integrity impacts.

CVE-2026-61045 is a high-severity vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data, modify some data, or cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 8.6, indicating significant confidentiality, integrity, and availability impacts.

CVE-2026-61042 is a high-severity vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has acknowledged the issue in their August 2026 Critical Security Patch Update advisory and recommends applying available patches promptly.

CVE-2026-61040 is a high-severity vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has addressed this issue in their August 2026 Critical Security Patch Update.

CVE-2026-61038 is a high-severity vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or full access to all data accessible through Oracle WebCenter Sites. The attacker can also perform unauthorized update, insert, or delete operations on some data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating a significant confidentiality and integrity impact. Oracle has released security patches addressing this and many other vulnerabilities in their August 2026 Critical Security Patch Update. Users are strongly advised to apply these patches promptly.

CVE-2026-61034 is a critical vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The vulnerability also has a scope change impact, affecting additional Oracle products. The CVSS 3.1 base score is 9.1, indicating critical severity with high confidentiality, integrity, and availability impacts. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities.

CVE-2026-61033 is a high-severity vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data, perform unauthorized data modifications, and cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 8.6, indicating significant confidentiality, integrity, and availability impacts.

CVE-2026-61032 is a high-severity vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has included this fix in its August 2026 Critical Security Patch Update.

CVE-2026-61029 is a critical vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to potentially take over the Oracle WebCenter Sites product. The vulnerability has a high complexity to exploit but can lead to full confidentiality, integrity, and availability compromise. Attacks exploiting this flaw may also impact additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update addressing this and many other vulnerabilities.

CVE-2026-61022 is a high-severity vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially resulting in full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has released security patches addressing this and many other vulnerabilities in their August 2026 Critical Security Patch Update advisory.