Threats tagged 'ghsa-m2c5-q25p-9243'

A critical vulnerability (CVE-2026-83031) exists in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows a low privileged attacker with network access via HTTP to potentially take over Oracle WebCenter Sites, impacting confidentiality, integrity, and availability. The vulnerability may also affect additional Oracle products due to scope change. Oracle has released patches addressing this vulnerability in their September 2026 Critical Security Patch Update.