Threats tagged 'ghsa-5xvv-9w25-q3fw'

A critical vulnerability (CVE-2026-83039) exists in Oracle WebCenter Portal component Composer of Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows a low-privileged attacker with network access via HTTP to potentially take over the Oracle WebCenter Portal, impacting confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 base score of 9.9. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.