Threats tagged 'ghsa-4mmj-352g-7fj8'

A vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects supported versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within Oracle WebCenter Portal. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.