Threats tagged 'ghsa-9h2x-pf7f-4g3j'

A critical vulnerability (CVE-2026-83043) exists in Oracle WebCenter Portal (component: Composer) versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, requiring user interaction from a third party. Successful exploitation can lead to full takeover of Oracle WebCenter Portal and may impact additional products. The vulnerability has a CVSS 3.1 base score of 9.6, indicating high confidentiality, integrity, and availability impacts. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.