Threats tagged 'ghsa-3fxm-g2c7-m7w9'

A vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects supported versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows a low privileged attacker with network access via HTTP to compromise the portal, potentially leading to unauthorized access and modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high severity with significant confidentiality and integrity impacts. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update advisory.