Webcenter Portal
Monthly
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a flaw in the Runtime Tools component that allows an attacker who already controls a high-privileged account to reach past that account's authorization boundary over HTTP, gaining unauthorized read access to critical portal data and limited ability to modify it, with a documented scope change that can affect connected products. Oracle rates it CVSS 7.6 (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N) — network-reachable but gated behind strong privileges. No public exploit code and no CISA KEV listing were identified at time of analysis, so this reads as a post-compromise privilege escalation and data-exposure issue rather than a remotely exploitable pre-auth break.
Unauthenticated attackers with HTTP network access to Oracle WebCenter Portal 12.2.1.4.0 or 14.1.2.0.0 can read data they should not be able to reach, including critical application data, via a flaw in the Runtime Tools component. The CVSS 3.1 base score is 7.5 (AV:N/AC:L/PR:N/UI:N, confidentiality-only impact), making it trivially automatable against any internet- or intranet-exposed instance that has not applied the referenced Oracle Critical Security Patch Update. There is no public exploit code identified at time of analysis and no CISA KEV listing, so exploitation appears opportunistic rather than confirmed in the wild.
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a flaw in the Runtime Tools component that lets a low-privileged, network-positioned attacker read and partially modify portal data via HTTP. Oracle rates it 7.1 (AV:N/AC:L/PR:L/UI:N, C:H/I:L), meaning exploitation is trivial once any valid low-privileged account is held, with full confidentiality impact against the portal's accessible data. No CISA KEV listing, public exploit code, or EPSS score was supplied with the source data, so active exploitation is unconfirmed at time of analysis.
Low-privileged attackers with HTTP network access can exploit the Security Framework component of Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 to gain unauthorized read access to critical data and limited write/delete access, with the impact extending to additional connected products (CVSS scope change). At CVSS 8.5 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N) the flaw is trivially automatable once any valid low-privileged account exists, but exploitation requires authentication, so it is not an unauthenticated internet-wide attack. Exploitation status: no public exploit identified at time of analysis; the CVE is not listed in CISA KEV and no EPSS score was supplied in the source data, so real-world activity is unconfirmed.
Authenticated but low-privileged users with HTTP access to Oracle WebCenter Portal can reach data well beyond their intended permissions through a flaw in the Runtime Tools component, affecting versions 12.2.1.4.0 and 14.1.2.0.0. Oracle scores it CVSS 7.7 with a scope change, meaning the portal's compromise can ripple into additional products reachable from it, with the impact limited to confidentiality. Neither CISA KEV listing nor public exploit code has been identified at time of analysis, and no EPSS probability was supplied, though the low attack complexity and absence of user interaction make weaponization plausible.
Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 contain an authentication-bypass flaw in the Runtime Tools component that can be triggered by an unauthenticated attacker over HTTP, giving access to critical portal data as well as the ability to modify or delete some of it. Oracle rates the issue CVSS 8.2 (C:H/I:L, no availability impact) with network vector, low complexity, and no privileges or user interaction required, making it trivially automatable against any internet- or intranet-reachable deployment that has not applied the referenced Critical Patch Update. No public exploit code or CISA KEV entry was present in the supplied intelligence at time of analysis, so exploitation is assessed as possible but not confirmed in the wild.
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 ship a flaw in the Runtime Tools component that lets any authenticated low-privileged user read critical portal data and partially degrade portal availability over HTTP. Oracle rates it as easily exploitable (CVSS 7.1, AV:N/AC:L/PR:L/UI:N, C:H/A:L), so no user interaction and no administrative role is needed beyond a valid account. No public exploit code and no CISA KEV entry were identified at time of analysis, but the data-exposure impact on an enterprise portal makes it worth prompt patching.
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain an easily exploited authorization flaw in the Runtime Tools component that lets a low-privileged, network-connected user reach and manipulate data well outside their intended scope, including data belonging to connected products (CVSS 8.5, scope change, high confidentiality and low integrity impact). Exploitation requires only a valid low-privilege portal account and standard HTTP access — no user interaction — making it attractive for lateral movement inside enterprise portal deployments. There is no public exploit identified at time of analysis, and no CISA KEV listing or EPSS score was supplied in the available intelligence.
Unauthenticated attackers who can reach the Composer component of Oracle WebCenter Portal 12.2.1.4.0 or 14.1.2.0.0 over HTTP can achieve complete takeover of the portal - full confidentiality, integrity and availability impact - provided they first persuade a legitimate user to perform some action, since the CVSS vector requires user interaction (UI:R). The scope-change flag (S:C) means a successful exploit can extend beyond the portal itself into integrated or dependent products, which is why the base score reaches 9.6 despite the interaction requirement. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV, so the practical near-term risk is driven by the low attack complexity and the existence of a vendor patch through Oracle's Critical Security Patch Update process rather than by observed exploitation.
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 allow a low-privileged, authenticated attacker with HTTP network access to read data they should not be able to reach through the Portlet Services component, scoring 7.7 on CVSS 3.1 with a scope change that can extend the impact to interconnected products. Exploitation requires only a valid low-privilege account and no user interaction, but with no CISA KEV listing, no EPSS score, and no public exploit code identified in the supplied intelligence, there is currently no public exploit identified at time of analysis. The practical priority is for organizations running the two affected WebCenter Portal releases facing untrusted or multi-tenant user populations.
Unauthenticated remote attackers can achieve full takeover of Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 via a SOAP-based attack, but exploitation requires a user to interact with a malicious element (UI:R). This critical-severity issue (CVSS 9.6) has a scope change that can impact additional products beyond WebCenter Portal. No public exploit code has been identified at time of analysis, and it is not listed in CISA KEV.
A low-privileged authenticated attacker with HTTP network access can fully compromise Oracle WebCenter Portal through its Composer component, achieving complete loss of confidentiality, integrity and availability plus a scope change that can extend impact to connected downstream products. Only versions 12.2.1.4.0 and 14.1.2.0.0 are affected, and the attack requires no user interaction and has low complexity - the sole meaningful barrier is that an attacker must already hold valid credentials (PR:L), so this is not a pre-authentication flaw. No public exploit code has been identified at time of analysis and there is no confirmed active exploitation (no CISA KEV listing), but the 9.9 CVSS score and the ease of exploitation once credentials are obtained make this a high-priority patch item.
Unauthenticated remote attackers can achieve full takeover of Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 through an authentication bypass reachable over HTTP, per the CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H vector that drives the 9.8 base score. No authentication, user interaction, or non-default configuration is required - the only practical prerequisite is network reachability of the WebCenter Sites HTTP interface, which means internet-exposed authoring or delivery instances carry the highest risk. The flaw is rated CWE-287 (Improper Authentication), and at time of analysis there was no public exploit code identified and no confirmed active exploitation (not listed in CISA KEV); Oracle has published a Critical Security Patch Update advisory covering the affected versions.
Authentication bypass in Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 lets unauthenticated remote attackers reach and compromise the application purely over HTTP, with a successful exploit resulting in complete takeover of the WebCenter Sites instance (CVSS 3.1 base score 9.8, vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Per the assessed vector there are no prerequisites beyond network reachability to the affected service: no credentials, no user interaction, and low attack complexity, which Oracle itself characterizes as 'easily exploitable.' No public exploit code has been identified at time of analysis, and no CISA KEV listing or EPSS score was supplied in the available intelligence, so the immediate driver for prioritization is the 9.8 severity combined with unauthenticated network exploitability rather than confirmed active exploitation.
An authentication bypass in Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 enables unauthenticated remote attackers to take over the application via HTTP requests, rated CVSS 3.1 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with full confidentiality, integrity and availability impact. The vulnerability sits in the WebCenter Sites component of Oracle Fusion Middleware and requires no credentials, no user interaction and no non-default configuration - only network reachability of the HTTP service - making any internet-exposed instance an immediate target. No public exploit code and no confirmed active exploitation were identified at time of analysis (no CISA KEV listing), but the trivial attack prerequisites mean exposed deployments should be treated as urgent; instances confined to internal networks or sitting behind an authenticating reverse proxy or WAF have materially reduced reachable attack surface.
Unauthenticated attackers with HTTP network access to Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 can read data they should not be able to reach, including potentially all content and data the application can access. Oracle rates it 7.5 (AV:N/AC:L/PR:N/UI:N/C:H/I:N/A:N), meaning no credentials, no user interaction and no special complexity are needed - only reachability to the web interface. There is no public exploit code and no CISA KEV listing at time of analysis, but the low attack requirements and high confidentiality impact make it a strong patch-now candidate for any internet-facing deployment.
Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 contain a flaw that lets a low-privileged, authenticated attacker reach the application over HTTP and gain complete control of the WebCenter Sites instance, with high impact to confidentiality, integrity and availability (CVSS 3.1 base 8.8, AV:N/AC:L/PR:L/UI:N). Because the flaw is rated 'easily exploitable' and requires no user interaction, any organization exposing a WebCenter Sites deployment to a network where attackers can hold even a basic account should treat this as a high priority. There is no evidence of active exploitation (not in CISA KEV), and no public proof-of-concept has been identified at time of analysis; exploitation status is therefore unconfirmed, and Oracle's patch is delivered through the October-2026-cycle Critical Security Patch Update referenced by NVD.
A low-privileged authenticated attacker with HTTP network access can fully compromise Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0, resulting in complete takeover of the application with high confidentiality, integrity, and availability impact. Oracle rates this 8.8 under CVSS 3.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), and the attack requires no user interaction, making it remotely exploitable by anyone holding a basic account. No public exploit code, EPSS score, or CISA KEV listing was present in the provided intelligence, so active exploitation is not confirmed at time of analysis.
A low-privileged authenticated attacker with network access over HTTP can achieve complete takeover of Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0, with a CVSS 3.1 base score of 9.9 - the scope-change flag (S:C) indicates that a successful compromise can also significantly impact other co-located Fusion Middleware and WebLogic components, not just Sites itself. No user interaction is required, though valid low-privilege credentials (or a low-privilege session that can be obtained) are a prerequisite, so this is not pre-authentication. There is no public exploit identified at time of analysis and no confirmed active exploitation, but the low attack complexity and full confidentiality, integrity, and availability impact make this a high-priority item for any organization running the affected versions.
Unauthenticated remote attackers who can reach the Portlet Services component of Oracle WebCenter Portal 12.2.1.4.0 or 14.1.2.0.0 over HTTP can bypass authentication and achieve full takeover of the application, with complete confidentiality, integrity and availability impact (CVSS 3.1 base 9.8; vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The flaw is an improper-authentication defect (CWE-287) and, per the assessed vector, needs no credentials, no user interaction and no non-default configuration, so any instance with Portlet Services reachable is directly at risk. No public exploit code has been identified at time of analysis, and the principal real-world limiter is exposure, since WebCenter Portal is typically deployed behind an enterprise perimeter rather than openly on the internet; this is nevertheless a high-priority issue on every available static signal, with thin real-world exploitation evidence.
Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 allow a low-privileged authenticated attacker with HTTP network access to fully compromise the Portal through the Composer component, resulting in complete loss of confidentiality, integrity and availability (CVSS 3.1 base 8.8). Exploitation requires only a valid low-privilege account and a reachable HTTP interface - no user interaction and no elevated privileges - making the barrier to abuse relatively low for anyone with any Portal login. There is no public exploit identified, no CISA KEV listing and no EPSS score provided at time of analysis, so this is currently a patch-now vulnerability rather than a confirmed actively exploited one.
Unauthenticated network attackers can obtain complete confidentiality and integrity compromise of Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 through the Portlet Services component, but only after a legitimate portal user is induced to interact with attacker-influenced content - exploitation is gated by the UI:R prerequisite, which requires human interaction from a person other than the attacker. With a CVSS 3.1 base score of 9.3 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N), the flaw allows unauthorized creation, deletion or modification of, and complete read access to, data accessible through the portal, and because scope changes (S:C) the impact can extend to additional integrated products. There is no KEV listing and no public exploit identified at time of analysis, so this is a high-severity issue whose real-world risk is bounded by the need to socially engineer a valid portal user and by the narrow set of affected releases.
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 can be taken over by an unauthenticated remote attacker who reaches the Composer component over HTTP, because the component fails to properly enforce authentication (CWE-287). Oracle scores this 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning no credentials, user interaction, or non-default configuration are required - only network reachability of the WebCenter Portal HTTP interface, with the stated outcome being full takeover of the portal. At time of analysis there is no public exploit identified and the issue is not listed as confirmed actively exploited (CISA KEV), so the practical risk is driven by exposure: internet-facing instances are directly at risk, while deployments confined to internal networks or sitting behind an authenticating reverse proxy or WAF are materially harder to reach. This is assessed as well-calibrated maximum severity rather than an inflated score, since an unauthenticated authentication bypass leading to product takeover justifies the C:H/I:H/A:H impact set.
Authentication bypass in the Portlet Services component of Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 lets unauthenticated remote attackers reach protected functionality over HTTP and, on success, take over the application (CVSS 3.1 base score 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The flaw maps to CWE-287 (Improper Authentication), meaning the portal's Portlet Services layer fails to properly validate that a request originates from an authenticated session. No public exploit code has been identified at time of analysis and the issue is not confirmed as actively exploited; the main exposure driver is network reachability of the WebCenter Portal HTTP interface, so internet-facing or broadly reachable instances behind no WAF or proxy carry the highest risk. Oracle addresses it in the September 2026 Critical Patch Update.
Improper authentication in the Portlet Services component of Oracle WebCenter Portal allows unauthenticated attackers with HTTP network access to the portal to bypass authentication and gain read and write access to all portal-accessible data, including the ability to create, delete, or modify critical content. Only versions 12.2.1.4.0 and 14.1.2.0.0 of this Oracle Fusion Middleware product are affected, and the flaw is rated high severity (CVSS 3.1 base 9.1, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) with no availability impact. No public exploit code and no confirmed active exploitation were identified at time of analysis, so exploitation risk is driven primarily by internet or broad-network exposure of an unpatched portal.
Unauthenticated attackers with network access to the HTTP interface of Oracle WebCenter Portal's Portlet Services component can exploit a hard-to-trigger flaw to fully compromise the application, per Oracle's Critical Security Patch Update (cspusep2026). Impact spans confidentiality, integrity and availability (CVSS 8.1), with the stated outcome being complete takeover of WebCenter Portal. Only supported versions 12.2.1.4.0 and 14.1.2.0.0 are listed as affected; no public exploit code or CISA KEV entry was present in the supplied intelligence, and the high attack-complexity metric (AC:H) suggests exploitation requires specific, non-trivial conditions rather than a simple one-shot request.
Authenticated low-privileged users can fully take over Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 by sending crafted HTTP requests to the Portlet Services component. Oracle's Critical Security Patch Update rates this 8.8 with complete loss of confidentiality, integrity and availability of the portal, meaning an attacker with any valid low-privilege account can seize control of the application. No public exploit code or CISA KEV listing is known at time of analysis, so exploitation is currently limited to attackers who already hold credentials, though the low attack complexity makes weaponization plausible once a proof of concept surfaces.
Low-privileged, authenticated attackers with network access over HTTP to the Composer component of Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 can fully take over the affected deployment, with the scope change (S:C) meaning impact can extend into other connected Oracle Fusion Middleware products. Oracle rates the flaw as 'easily exploitable' with low attack complexity, no user interaction, and complete loss of confidentiality, integrity, and availability (CVSS 3.1 base score 9.9, vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). The practical bar is a valid low-privilege account, which makes this a genuine high-priority issue for internet- or broadly reachable WebCenter Portal instances rather than a theoretical high-score artifact; no public proof-of-concept and no CISA KEV entry were identified at time of analysis, so there is no public exploit identified at time of analysis.
Complete takeover of Oracle WebCenter Portal is possible by a remote, unauthenticated attacker sending crafted HTTP requests to the Runtime Tools component, affecting versions 12.2.1.4.0 and 14.1.2.0.0 of this Oracle Fusion Middleware product. The flaw yields full high-impact compromise of confidentiality, integrity, and availability (CVSS 9.8) with no user interaction or credentials required. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the 'easily exploitable' language from Oracle and the pre-auth network vector make it a high-priority patch.
Unauthenticated remote data exposure in Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 allows network-based attackers to access critical or all portal-accessible data via HTTP with no privileges or user interaction required. Tagged as an Authentication Bypass in the Oracle CPUAUG2026 advisory, the vulnerability carries a changed scope, meaning successful exploitation can cascade to impact additional Oracle Fusion Middleware products integrated with the portal. No public exploit has been identified at time of analysis, and remediation is available through Oracle's Critical Security Patch Update for August 2026.
Full takeover of Oracle WebCenter Portal is achievable by an unauthenticated remote attacker via HTTP, affecting the Runtime Tools component in versions 12.2.1.4.0 and 14.1.2.0.0 of the Fusion Middleware stack. The CVSS vector rates this 8.1 due to high attack complexity (AC:H), meaning exploitation requires specific but unspecified preconditions to be met - yet successful exploitation yields complete compromise of confidentiality, integrity, and availability. No public exploit code and no CISA KEV listing have been identified at time of analysis; however, the Oracle CPU August 2026 advisory confirms the vulnerability is vendor-acknowledged.
Unauthenticated remote compromise of Oracle WebCenter Portal's Runtime Tools component exposes critical data through an authentication bypass vulnerability patched in Oracle's August 2026 Critical Patch Update. Affected versions 12.2.1.4.0 and 14.1.2.0.0 allow any network-accessible attacker to gain complete read access to all data handled by the portal - and, due to a confirmed scope change, potentially reach data in additional connected Oracle Fusion Middleware products. No public exploit or KEV listing is confirmed at time of analysis, but the absence of authentication requirements and low attack complexity make this a high-priority remediation target.
Cross-context data exposure in Oracle WebCenter Portal's Runtime Tools component allows a low-privileged, network-authenticated attacker to compromise confidentiality at high severity and integrity at limited scope, with a scope change that can impact additional Oracle Fusion Middleware products. Affected versions are 12.2.1.4.0 and 14.1.2.0.0, and Oracle classifies this as 'easily exploitable' despite the user-interaction requirement. No public exploit or CISA KEV listing has been identified at time of analysis, but the Oracle-tagged 'Authentication Bypass' descriptor suggests privilege escalation beyond the attacker's granted access level is central to the vulnerability's mechanism.
Unauthenticated remote exploitation of Oracle WebCenter Portal's Runtime Tools component (versions 12.2.1.4.0 and 14.1.2.0.0) enables a network-based authentication bypass over HTTP, contingent on a single human-interaction step by a target user. Successful exploitation yields complete confidentiality exposure of all data accessible to the portal instance and limited unauthorized write capability, with scope-change implications that can cascade into co-hosted Oracle Fusion Middleware products. Oracle confirmed the issue through its August 2026 Critical Patch Update; no public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthorized read and write access to critical data in Oracle WebCenter Portal's Runtime Tools component is achievable by a low-privileged, network-authenticated attacker over HTTP, contingent on victim user interaction. Successful exploitation triggers a scope change - extending compromise beyond WebCenter Portal to additional Oracle Fusion Middleware products - resulting in full confidentiality and integrity impact on critical portal data. No public exploit code has been identified at time of analysis, and this vulnerability is not currently listed in the CISA KEV catalog.
Oracle WebCenter Portal's Runtime Tools component exposes a high-severity, network-exploitable authentication bypass affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged, remote-authenticated attacker who can induce a victim user to interact with a malicious HTTP request can bypass authorization controls to gain complete read access to all WebCenter Portal data and perform unauthorized creation, deletion, or modification of critical data - including scope-change impact to additional Oracle Fusion Middleware products. No public exploit code has been identified at time of analysis, and it is not listed in the CISA KEV catalog.
Full takeover of Oracle WebCenter Portal is achievable by any low-privileged authenticated user over HTTP, affecting both currently supported release lines - 12.2.1.4.0 and 14.1.2.0.0 - in the Runtime Tools component. The CVSS 3.1 score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) reflects that exploitation demands minimal prerequisites: a valid portal account and network reachability, with no interaction from other users required and no special configuration needed beyond a standard supported deployment. No public exploit code and no CISA KEV listing have been identified at time of analysis, though Oracle CPU patches are routinely reverse-engineered shortly after release, narrowing the safe patching window significantly for exposed instances.
Full takeover of Oracle WebCenter Portal is achievable by a low-privileged network attacker exploiting a flaw in the Runtime Tools component via HTTP, affecting versions 12.2.1.4.0 and 14.1.2.0.0 within the Oracle Fusion Middleware product line. Successful exploitation yields complete compromise of confidentiality, integrity, and availability, with a confirmed scope change indicating that connected Fusion Middleware components beyond the portal itself may also be impacted. No public exploit code or CISA KEV listing has been identified at time of analysis; Oracle's August 2026 Critical Security Patch Update (CSPU) confirms the vulnerability and is the primary remediation vehicle.
Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 expose a high-severity flaw in the Runtime Tools component that allows a low-privileged, network-accessible attacker to gain complete read access to all portal-accessible data and perform limited data manipulation and partial denial of service via HTTP. The vulnerability is rated CVSS 7.6 and disclosed as part of Oracle's Critical Patch Update for August 2026. No public exploit code or CISA KEV listing has been identified at time of analysis, though the 'Authentication Bypass' tag in the intelligence metadata suggests potential elevation from low-privilege access that warrants close attention.
Oracle WebCenter Portal 14.1.2.0.0 exposes critical confidential data through an authentication bypass in its Runtime Tools component, reachable by any low-privileged user over HTTP. Oracle explicitly classifies this as 'easily exploitable' and assigns a scope-change designation (S:C), meaning successful exploitation can spill over into additional Oracle Fusion Middleware products integrated with the portal. No public exploit code or CISA KEV listing exists at time of analysis, but the low attack complexity and broad network accessibility make this straightforward to trigger once the bypass mechanism is understood.
Authentication bypass in Oracle WebCenter Portal's Runtime Tools component allows unauthenticated remote attackers to compromise confidentiality and integrity of critical portal data across affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability carries a CVSS 3.1 score of 8.7 with scope change (S:C), meaning successful exploitation can cascade beyond WebCenter Portal to impact additional products within the Oracle Fusion Middleware stack. No public exploit code has been identified at time of analysis, and high attack complexity (AC:H) limits opportunistic exploitation, though the authentication bypass nature and scope change elevate priority for Oracle-heavy environments.
Oracle WebCenter Portal Runtime Tools component in versions 12.2.1.4.0 and 14.1.2.0.0 allows low-privileged, network-authenticated attackers to bypass authorization controls and achieve full read and write access to critical portal data via HTTP. The vulnerability is tagged as an Authentication Bypass, meaning an authenticated user with minimal privileges can escalate access beyond their intended authorization boundary. No public exploit has been identified at time of analysis, and it is not currently listed in the CISA KEV catalog, though the low attack complexity makes it a realistic threat in any environment where untrusted low-privileged accounts exist.
Oracle WebCenter Portal's Runtime Tools component in versions 12.2.1.4.0 and 14.1.2.0.0 is exploitable over HTTP by unauthenticated remote attackers, subject to victim user interaction, enabling unauthorized modification or deletion of portal data and a partial denial of service. The CVSS:3.1/AV:N/AC:L/PR:N/UI:R vector confirms low-complexity network exploitation requiring no credentials, only that a victim user be induced to interact with attacker-controlled content. No public exploit code or CISA KEV listing has been identified at time of analysis; this was disclosed as part of Oracle's August 2026 Critical Patch Update.
Compromise of Oracle WebCenter Portal's Composer component - versions 12.2.1.4.0 and 14.1.2.0.0 - allows an authenticated low-privilege attacker over HTTP to achieve high-integrity impact, including unauthorized creation, deletion, and modification of critical portal data, limited confidentiality exposure, and partial denial of service. The CVSS scope change (S:C) indicates exploitation can cascade to additional Oracle Fusion Middleware products beyond WebCenter Portal itself. Disclosed in Oracle's August 2026 Critical Security Patch Update; no public exploit code or CISA KEV listing has been identified at time of analysis.
Full takeover of Oracle WebCenter Portal is achievable by a low-privileged network attacker targeting the Composer component via Java RMI in versions 12.2.1.4.0 and 14.1.2.0.0. Oracle describes the vulnerability as 'easily exploitable,' with the CVSS 3.1 score of 8.8 reflecting complete Confidentiality, Integrity, and Availability compromise upon successful exploitation. No public exploit code has been identified at time of analysis, and this CVE has not appeared in the CISA Known Exploited Vulnerabilities catalog, though it is disclosed as part of Oracle's Critical Patch Update for August 2026.
Privilege-escalating account/system takeover in Oracle WebCenter Portal (Fusion Middleware, Composer component) versions 12.2.1.4.0 and 14.1.2.0.0 lets an authenticated low-privileged attacker reach full compromise over HTTP. Because the flaw carries a scope change (S:C), successful exploitation can pivot beyond WebCenter Portal to impact additional products, and Oracle rates it CVSS 9.9. No public exploit identified at time of analysis, but the near-maximum score, low attack complexity, and minimal privilege requirement make it a top-tier patch priority.
Full takeover of Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 is achievable by a low-privileged, network-authenticated attacker targeting the Composer component over HTTP. Oracle's own advisory characterizes the vulnerability as 'easily exploitable,' with high impact across confidentiality, integrity, and availability and no user interaction required. No public exploit or CISA KEV listing exists at time of analysis, but the combination of low attack complexity, low privilege requirement, and complete portal compromise warrants urgent patching priority for all affected deployments.
Unauthenticated data compromise and denial of service in Oracle WebCenter Portal (Fusion Middleware, Portlet Services component) affects supported versions 12.2.1.4.0 and 14.1.2.0.0. A remote attacker with only HTTP network access and no credentials can read or fully access all portal-accessible data and can force a hang or repeatable crash (complete DoS) of the portal. Oracle rates it CVSS 3.1 9.1 and flags it as easily exploitable; no public exploit has been identified at time of analysis and it is not listed in CISA KEV.
Full compromise of Oracle WebCenter Portal (Fusion Middleware, Runtime Tools component) affects versions 12.2.1.4.0 and 14.1.2.0.0, where a low-privileged attacker with HTTP network access can take over the portal and, because of a scope change, significantly impact other products. Oracle rates this CVSS 3.1 9.9 (Critical) with high confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and minimal privilege requirement make it a high-priority patch item.
Full product takeover of Oracle WebCenter Portal (versions 12.2.1.4.0 and 14.1.2.0.0) is possible by a remote, unauthenticated attacker over HTTP against the Runtime Tools component. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:H, base 9.8) reflects that no credentials, user interaction, or special conditions are needed, and a successful attack fully compromises confidentiality, integrity, and availability. This is a July 2026 Oracle Critical Patch Update item with no public exploit identified at time of analysis and no CISA KEV listing.
Full takeover of Oracle WebCenter Portal (Fusion Middleware, Runtime Tools component) is achievable by a low-privileged attacker with network access over HTTP, per Oracle's July 2026 Critical Patch Update. Because the flaw carries a scope change (S:C), successful exploitation can significantly impact additional products beyond WebCenter Portal itself, driving the CVSS 3.1 base score to 9.9. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Privilege/authorization bypass in Oracle WebCenter Portal (Fusion Middleware, Runtime Tools component) versions 12.2.1.4.0 and 14.1.2.0.0 lets a low-privileged, authenticated network attacker read and modify all portal-accessible data over HTTP. The scope-changing flaw (CVSS 3.1 base 9.6) can significantly impact additional products beyond the portal itself and is tagged as an authentication bypass. No public exploit identified at time of analysis and it is not listed in CISA KEV; disclosed via the Oracle Critical Patch Update of July 2026.
Full account/system takeover in Oracle WebCenter Portal (versions 12.2.1.4.0 and 14.1.2.0.0, Runtime Tools component) allows an authenticated low-privileged attacker to compromise the product over HTTP and gain complete control. Oracle rates this 'easily exploitable' with CVSS 8.8 (C:H/I:H/A:H), meaning any user with minimal portal credentials can escalate to full compromise. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and Oracle's own 'easily exploitable' characterization make it a high-priority patch.
Privilege-escalating account takeover in Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 (Runtime Tools component) lets a low-privileged, network-authenticated attacker fully compromise the portal over HTTP and, because of a scope change (S:C), pivot into other components of the Oracle Fusion Middleware stack. Oracle rates it CVSS 9.9 with full confidentiality, integrity, and availability loss, and describes it as 'easily exploitable.' There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and minimal privilege requirement make it a high-priority patch.
Account/instance takeover in Oracle WebCenter Portal (Fusion Middleware component: Runtime Tools) lets a low-privileged remote attacker fully compromise affected 12.2.1.4.0 and 14.1.2.0.0 deployments over HTTP. Because the flaw carries a scope change (S:C), successful exploitation can spill beyond the portal into other Fusion Middleware components, and Oracle rates full confidentiality, integrity, and availability impact (CVSS 3.1 base 9.9). No public exploit has been identified at time of analysis, but the low attack complexity and 'easily exploitable' vendor wording make this a high-priority patch item.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Content integration). Rated medium severity (CVSS 4.4), this vulnerability is remotely exploitable. No vendor patch available.
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.
CKEditor4 is an open source WYSIWYG HTML editor. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
CKEditor4 is an open source WYSIWYG HTML editor. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. This Unrestricted File Upload vulnerability could allow attackers to upload malicious files that can be executed on the server.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. This Unrestricted File Upload vulnerability could allow attackers to upload malicious files that can be executed on the server.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Unrestricted File Upload vulnerability could allow attackers to upload malicious files that can be executed on the server.
jsoup is a Java library for working with HTML. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
XStream is software for serializing Java objects to XML and back again. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.
A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.
XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
XStream is a Java library to serialize objects to XML and back again. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
XStream is a Java library to serialize objects to XML and back again. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.
XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a flaw in the Runtime Tools component that allows an attacker who already controls a high-privileged account to reach past that account's authorization boundary over HTTP, gaining unauthorized read access to critical portal data and limited ability to modify it, with a documented scope change that can affect connected products. Oracle rates it CVSS 7.6 (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N) — network-reachable but gated behind strong privileges. No public exploit code and no CISA KEV listing were identified at time of analysis, so this reads as a post-compromise privilege escalation and data-exposure issue rather than a remotely exploitable pre-auth break.
Unauthenticated attackers with HTTP network access to Oracle WebCenter Portal 12.2.1.4.0 or 14.1.2.0.0 can read data they should not be able to reach, including critical application data, via a flaw in the Runtime Tools component. The CVSS 3.1 base score is 7.5 (AV:N/AC:L/PR:N/UI:N, confidentiality-only impact), making it trivially automatable against any internet- or intranet-exposed instance that has not applied the referenced Oracle Critical Security Patch Update. There is no public exploit code identified at time of analysis and no CISA KEV listing, so exploitation appears opportunistic rather than confirmed in the wild.
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a flaw in the Runtime Tools component that lets a low-privileged, network-positioned attacker read and partially modify portal data via HTTP. Oracle rates it 7.1 (AV:N/AC:L/PR:L/UI:N, C:H/I:L), meaning exploitation is trivial once any valid low-privileged account is held, with full confidentiality impact against the portal's accessible data. No CISA KEV listing, public exploit code, or EPSS score was supplied with the source data, so active exploitation is unconfirmed at time of analysis.
Low-privileged attackers with HTTP network access can exploit the Security Framework component of Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 to gain unauthorized read access to critical data and limited write/delete access, with the impact extending to additional connected products (CVSS scope change). At CVSS 8.5 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N) the flaw is trivially automatable once any valid low-privileged account exists, but exploitation requires authentication, so it is not an unauthenticated internet-wide attack. Exploitation status: no public exploit identified at time of analysis; the CVE is not listed in CISA KEV and no EPSS score was supplied in the source data, so real-world activity is unconfirmed.
Authenticated but low-privileged users with HTTP access to Oracle WebCenter Portal can reach data well beyond their intended permissions through a flaw in the Runtime Tools component, affecting versions 12.2.1.4.0 and 14.1.2.0.0. Oracle scores it CVSS 7.7 with a scope change, meaning the portal's compromise can ripple into additional products reachable from it, with the impact limited to confidentiality. Neither CISA KEV listing nor public exploit code has been identified at time of analysis, and no EPSS probability was supplied, though the low attack complexity and absence of user interaction make weaponization plausible.
Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 contain an authentication-bypass flaw in the Runtime Tools component that can be triggered by an unauthenticated attacker over HTTP, giving access to critical portal data as well as the ability to modify or delete some of it. Oracle rates the issue CVSS 8.2 (C:H/I:L, no availability impact) with network vector, low complexity, and no privileges or user interaction required, making it trivially automatable against any internet- or intranet-reachable deployment that has not applied the referenced Critical Patch Update. No public exploit code or CISA KEV entry was present in the supplied intelligence at time of analysis, so exploitation is assessed as possible but not confirmed in the wild.
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 ship a flaw in the Runtime Tools component that lets any authenticated low-privileged user read critical portal data and partially degrade portal availability over HTTP. Oracle rates it as easily exploitable (CVSS 7.1, AV:N/AC:L/PR:L/UI:N, C:H/A:L), so no user interaction and no administrative role is needed beyond a valid account. No public exploit code and no CISA KEV entry were identified at time of analysis, but the data-exposure impact on an enterprise portal makes it worth prompt patching.
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain an easily exploited authorization flaw in the Runtime Tools component that lets a low-privileged, network-connected user reach and manipulate data well outside their intended scope, including data belonging to connected products (CVSS 8.5, scope change, high confidentiality and low integrity impact). Exploitation requires only a valid low-privilege portal account and standard HTTP access — no user interaction — making it attractive for lateral movement inside enterprise portal deployments. There is no public exploit identified at time of analysis, and no CISA KEV listing or EPSS score was supplied in the available intelligence.
Unauthenticated attackers who can reach the Composer component of Oracle WebCenter Portal 12.2.1.4.0 or 14.1.2.0.0 over HTTP can achieve complete takeover of the portal - full confidentiality, integrity and availability impact - provided they first persuade a legitimate user to perform some action, since the CVSS vector requires user interaction (UI:R). The scope-change flag (S:C) means a successful exploit can extend beyond the portal itself into integrated or dependent products, which is why the base score reaches 9.6 despite the interaction requirement. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV, so the practical near-term risk is driven by the low attack complexity and the existence of a vendor patch through Oracle's Critical Security Patch Update process rather than by observed exploitation.
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 allow a low-privileged, authenticated attacker with HTTP network access to read data they should not be able to reach through the Portlet Services component, scoring 7.7 on CVSS 3.1 with a scope change that can extend the impact to interconnected products. Exploitation requires only a valid low-privilege account and no user interaction, but with no CISA KEV listing, no EPSS score, and no public exploit code identified in the supplied intelligence, there is currently no public exploit identified at time of analysis. The practical priority is for organizations running the two affected WebCenter Portal releases facing untrusted or multi-tenant user populations.
Unauthenticated remote attackers can achieve full takeover of Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 via a SOAP-based attack, but exploitation requires a user to interact with a malicious element (UI:R). This critical-severity issue (CVSS 9.6) has a scope change that can impact additional products beyond WebCenter Portal. No public exploit code has been identified at time of analysis, and it is not listed in CISA KEV.
A low-privileged authenticated attacker with HTTP network access can fully compromise Oracle WebCenter Portal through its Composer component, achieving complete loss of confidentiality, integrity and availability plus a scope change that can extend impact to connected downstream products. Only versions 12.2.1.4.0 and 14.1.2.0.0 are affected, and the attack requires no user interaction and has low complexity - the sole meaningful barrier is that an attacker must already hold valid credentials (PR:L), so this is not a pre-authentication flaw. No public exploit code has been identified at time of analysis and there is no confirmed active exploitation (no CISA KEV listing), but the 9.9 CVSS score and the ease of exploitation once credentials are obtained make this a high-priority patch item.
Unauthenticated remote attackers can achieve full takeover of Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 through an authentication bypass reachable over HTTP, per the CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H vector that drives the 9.8 base score. No authentication, user interaction, or non-default configuration is required - the only practical prerequisite is network reachability of the WebCenter Sites HTTP interface, which means internet-exposed authoring or delivery instances carry the highest risk. The flaw is rated CWE-287 (Improper Authentication), and at time of analysis there was no public exploit code identified and no confirmed active exploitation (not listed in CISA KEV); Oracle has published a Critical Security Patch Update advisory covering the affected versions.
Authentication bypass in Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 lets unauthenticated remote attackers reach and compromise the application purely over HTTP, with a successful exploit resulting in complete takeover of the WebCenter Sites instance (CVSS 3.1 base score 9.8, vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Per the assessed vector there are no prerequisites beyond network reachability to the affected service: no credentials, no user interaction, and low attack complexity, which Oracle itself characterizes as 'easily exploitable.' No public exploit code has been identified at time of analysis, and no CISA KEV listing or EPSS score was supplied in the available intelligence, so the immediate driver for prioritization is the 9.8 severity combined with unauthenticated network exploitability rather than confirmed active exploitation.
An authentication bypass in Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 enables unauthenticated remote attackers to take over the application via HTTP requests, rated CVSS 3.1 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with full confidentiality, integrity and availability impact. The vulnerability sits in the WebCenter Sites component of Oracle Fusion Middleware and requires no credentials, no user interaction and no non-default configuration - only network reachability of the HTTP service - making any internet-exposed instance an immediate target. No public exploit code and no confirmed active exploitation were identified at time of analysis (no CISA KEV listing), but the trivial attack prerequisites mean exposed deployments should be treated as urgent; instances confined to internal networks or sitting behind an authenticating reverse proxy or WAF have materially reduced reachable attack surface.
Unauthenticated attackers with HTTP network access to Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 can read data they should not be able to reach, including potentially all content and data the application can access. Oracle rates it 7.5 (AV:N/AC:L/PR:N/UI:N/C:H/I:N/A:N), meaning no credentials, no user interaction and no special complexity are needed - only reachability to the web interface. There is no public exploit code and no CISA KEV listing at time of analysis, but the low attack requirements and high confidentiality impact make it a strong patch-now candidate for any internet-facing deployment.
Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 contain a flaw that lets a low-privileged, authenticated attacker reach the application over HTTP and gain complete control of the WebCenter Sites instance, with high impact to confidentiality, integrity and availability (CVSS 3.1 base 8.8, AV:N/AC:L/PR:L/UI:N). Because the flaw is rated 'easily exploitable' and requires no user interaction, any organization exposing a WebCenter Sites deployment to a network where attackers can hold even a basic account should treat this as a high priority. There is no evidence of active exploitation (not in CISA KEV), and no public proof-of-concept has been identified at time of analysis; exploitation status is therefore unconfirmed, and Oracle's patch is delivered through the October-2026-cycle Critical Security Patch Update referenced by NVD.
A low-privileged authenticated attacker with HTTP network access can fully compromise Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0, resulting in complete takeover of the application with high confidentiality, integrity, and availability impact. Oracle rates this 8.8 under CVSS 3.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), and the attack requires no user interaction, making it remotely exploitable by anyone holding a basic account. No public exploit code, EPSS score, or CISA KEV listing was present in the provided intelligence, so active exploitation is not confirmed at time of analysis.
A low-privileged authenticated attacker with network access over HTTP can achieve complete takeover of Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0, with a CVSS 3.1 base score of 9.9 - the scope-change flag (S:C) indicates that a successful compromise can also significantly impact other co-located Fusion Middleware and WebLogic components, not just Sites itself. No user interaction is required, though valid low-privilege credentials (or a low-privilege session that can be obtained) are a prerequisite, so this is not pre-authentication. There is no public exploit identified at time of analysis and no confirmed active exploitation, but the low attack complexity and full confidentiality, integrity, and availability impact make this a high-priority item for any organization running the affected versions.
Unauthenticated remote attackers who can reach the Portlet Services component of Oracle WebCenter Portal 12.2.1.4.0 or 14.1.2.0.0 over HTTP can bypass authentication and achieve full takeover of the application, with complete confidentiality, integrity and availability impact (CVSS 3.1 base 9.8; vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The flaw is an improper-authentication defect (CWE-287) and, per the assessed vector, needs no credentials, no user interaction and no non-default configuration, so any instance with Portlet Services reachable is directly at risk. No public exploit code has been identified at time of analysis, and the principal real-world limiter is exposure, since WebCenter Portal is typically deployed behind an enterprise perimeter rather than openly on the internet; this is nevertheless a high-priority issue on every available static signal, with thin real-world exploitation evidence.
Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 allow a low-privileged authenticated attacker with HTTP network access to fully compromise the Portal through the Composer component, resulting in complete loss of confidentiality, integrity and availability (CVSS 3.1 base 8.8). Exploitation requires only a valid low-privilege account and a reachable HTTP interface - no user interaction and no elevated privileges - making the barrier to abuse relatively low for anyone with any Portal login. There is no public exploit identified, no CISA KEV listing and no EPSS score provided at time of analysis, so this is currently a patch-now vulnerability rather than a confirmed actively exploited one.
Unauthenticated network attackers can obtain complete confidentiality and integrity compromise of Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 through the Portlet Services component, but only after a legitimate portal user is induced to interact with attacker-influenced content - exploitation is gated by the UI:R prerequisite, which requires human interaction from a person other than the attacker. With a CVSS 3.1 base score of 9.3 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N), the flaw allows unauthorized creation, deletion or modification of, and complete read access to, data accessible through the portal, and because scope changes (S:C) the impact can extend to additional integrated products. There is no KEV listing and no public exploit identified at time of analysis, so this is a high-severity issue whose real-world risk is bounded by the need to socially engineer a valid portal user and by the narrow set of affected releases.
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 can be taken over by an unauthenticated remote attacker who reaches the Composer component over HTTP, because the component fails to properly enforce authentication (CWE-287). Oracle scores this 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning no credentials, user interaction, or non-default configuration are required - only network reachability of the WebCenter Portal HTTP interface, with the stated outcome being full takeover of the portal. At time of analysis there is no public exploit identified and the issue is not listed as confirmed actively exploited (CISA KEV), so the practical risk is driven by exposure: internet-facing instances are directly at risk, while deployments confined to internal networks or sitting behind an authenticating reverse proxy or WAF are materially harder to reach. This is assessed as well-calibrated maximum severity rather than an inflated score, since an unauthenticated authentication bypass leading to product takeover justifies the C:H/I:H/A:H impact set.
Authentication bypass in the Portlet Services component of Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 lets unauthenticated remote attackers reach protected functionality over HTTP and, on success, take over the application (CVSS 3.1 base score 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The flaw maps to CWE-287 (Improper Authentication), meaning the portal's Portlet Services layer fails to properly validate that a request originates from an authenticated session. No public exploit code has been identified at time of analysis and the issue is not confirmed as actively exploited; the main exposure driver is network reachability of the WebCenter Portal HTTP interface, so internet-facing or broadly reachable instances behind no WAF or proxy carry the highest risk. Oracle addresses it in the September 2026 Critical Patch Update.
Improper authentication in the Portlet Services component of Oracle WebCenter Portal allows unauthenticated attackers with HTTP network access to the portal to bypass authentication and gain read and write access to all portal-accessible data, including the ability to create, delete, or modify critical content. Only versions 12.2.1.4.0 and 14.1.2.0.0 of this Oracle Fusion Middleware product are affected, and the flaw is rated high severity (CVSS 3.1 base 9.1, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) with no availability impact. No public exploit code and no confirmed active exploitation were identified at time of analysis, so exploitation risk is driven primarily by internet or broad-network exposure of an unpatched portal.
Unauthenticated attackers with network access to the HTTP interface of Oracle WebCenter Portal's Portlet Services component can exploit a hard-to-trigger flaw to fully compromise the application, per Oracle's Critical Security Patch Update (cspusep2026). Impact spans confidentiality, integrity and availability (CVSS 8.1), with the stated outcome being complete takeover of WebCenter Portal. Only supported versions 12.2.1.4.0 and 14.1.2.0.0 are listed as affected; no public exploit code or CISA KEV entry was present in the supplied intelligence, and the high attack-complexity metric (AC:H) suggests exploitation requires specific, non-trivial conditions rather than a simple one-shot request.
Authenticated low-privileged users can fully take over Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 by sending crafted HTTP requests to the Portlet Services component. Oracle's Critical Security Patch Update rates this 8.8 with complete loss of confidentiality, integrity and availability of the portal, meaning an attacker with any valid low-privilege account can seize control of the application. No public exploit code or CISA KEV listing is known at time of analysis, so exploitation is currently limited to attackers who already hold credentials, though the low attack complexity makes weaponization plausible once a proof of concept surfaces.
Low-privileged, authenticated attackers with network access over HTTP to the Composer component of Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 can fully take over the affected deployment, with the scope change (S:C) meaning impact can extend into other connected Oracle Fusion Middleware products. Oracle rates the flaw as 'easily exploitable' with low attack complexity, no user interaction, and complete loss of confidentiality, integrity, and availability (CVSS 3.1 base score 9.9, vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). The practical bar is a valid low-privilege account, which makes this a genuine high-priority issue for internet- or broadly reachable WebCenter Portal instances rather than a theoretical high-score artifact; no public proof-of-concept and no CISA KEV entry were identified at time of analysis, so there is no public exploit identified at time of analysis.
Complete takeover of Oracle WebCenter Portal is possible by a remote, unauthenticated attacker sending crafted HTTP requests to the Runtime Tools component, affecting versions 12.2.1.4.0 and 14.1.2.0.0 of this Oracle Fusion Middleware product. The flaw yields full high-impact compromise of confidentiality, integrity, and availability (CVSS 9.8) with no user interaction or credentials required. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the 'easily exploitable' language from Oracle and the pre-auth network vector make it a high-priority patch.
Unauthenticated remote data exposure in Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 allows network-based attackers to access critical or all portal-accessible data via HTTP with no privileges or user interaction required. Tagged as an Authentication Bypass in the Oracle CPUAUG2026 advisory, the vulnerability carries a changed scope, meaning successful exploitation can cascade to impact additional Oracle Fusion Middleware products integrated with the portal. No public exploit has been identified at time of analysis, and remediation is available through Oracle's Critical Security Patch Update for August 2026.
Full takeover of Oracle WebCenter Portal is achievable by an unauthenticated remote attacker via HTTP, affecting the Runtime Tools component in versions 12.2.1.4.0 and 14.1.2.0.0 of the Fusion Middleware stack. The CVSS vector rates this 8.1 due to high attack complexity (AC:H), meaning exploitation requires specific but unspecified preconditions to be met - yet successful exploitation yields complete compromise of confidentiality, integrity, and availability. No public exploit code and no CISA KEV listing have been identified at time of analysis; however, the Oracle CPU August 2026 advisory confirms the vulnerability is vendor-acknowledged.
Unauthenticated remote compromise of Oracle WebCenter Portal's Runtime Tools component exposes critical data through an authentication bypass vulnerability patched in Oracle's August 2026 Critical Patch Update. Affected versions 12.2.1.4.0 and 14.1.2.0.0 allow any network-accessible attacker to gain complete read access to all data handled by the portal - and, due to a confirmed scope change, potentially reach data in additional connected Oracle Fusion Middleware products. No public exploit or KEV listing is confirmed at time of analysis, but the absence of authentication requirements and low attack complexity make this a high-priority remediation target.
Cross-context data exposure in Oracle WebCenter Portal's Runtime Tools component allows a low-privileged, network-authenticated attacker to compromise confidentiality at high severity and integrity at limited scope, with a scope change that can impact additional Oracle Fusion Middleware products. Affected versions are 12.2.1.4.0 and 14.1.2.0.0, and Oracle classifies this as 'easily exploitable' despite the user-interaction requirement. No public exploit or CISA KEV listing has been identified at time of analysis, but the Oracle-tagged 'Authentication Bypass' descriptor suggests privilege escalation beyond the attacker's granted access level is central to the vulnerability's mechanism.
Unauthenticated remote exploitation of Oracle WebCenter Portal's Runtime Tools component (versions 12.2.1.4.0 and 14.1.2.0.0) enables a network-based authentication bypass over HTTP, contingent on a single human-interaction step by a target user. Successful exploitation yields complete confidentiality exposure of all data accessible to the portal instance and limited unauthorized write capability, with scope-change implications that can cascade into co-hosted Oracle Fusion Middleware products. Oracle confirmed the issue through its August 2026 Critical Patch Update; no public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthorized read and write access to critical data in Oracle WebCenter Portal's Runtime Tools component is achievable by a low-privileged, network-authenticated attacker over HTTP, contingent on victim user interaction. Successful exploitation triggers a scope change - extending compromise beyond WebCenter Portal to additional Oracle Fusion Middleware products - resulting in full confidentiality and integrity impact on critical portal data. No public exploit code has been identified at time of analysis, and this vulnerability is not currently listed in the CISA KEV catalog.
Oracle WebCenter Portal's Runtime Tools component exposes a high-severity, network-exploitable authentication bypass affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged, remote-authenticated attacker who can induce a victim user to interact with a malicious HTTP request can bypass authorization controls to gain complete read access to all WebCenter Portal data and perform unauthorized creation, deletion, or modification of critical data - including scope-change impact to additional Oracle Fusion Middleware products. No public exploit code has been identified at time of analysis, and it is not listed in the CISA KEV catalog.
Full takeover of Oracle WebCenter Portal is achievable by any low-privileged authenticated user over HTTP, affecting both currently supported release lines - 12.2.1.4.0 and 14.1.2.0.0 - in the Runtime Tools component. The CVSS 3.1 score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) reflects that exploitation demands minimal prerequisites: a valid portal account and network reachability, with no interaction from other users required and no special configuration needed beyond a standard supported deployment. No public exploit code and no CISA KEV listing have been identified at time of analysis, though Oracle CPU patches are routinely reverse-engineered shortly after release, narrowing the safe patching window significantly for exposed instances.
Full takeover of Oracle WebCenter Portal is achievable by a low-privileged network attacker exploiting a flaw in the Runtime Tools component via HTTP, affecting versions 12.2.1.4.0 and 14.1.2.0.0 within the Oracle Fusion Middleware product line. Successful exploitation yields complete compromise of confidentiality, integrity, and availability, with a confirmed scope change indicating that connected Fusion Middleware components beyond the portal itself may also be impacted. No public exploit code or CISA KEV listing has been identified at time of analysis; Oracle's August 2026 Critical Security Patch Update (CSPU) confirms the vulnerability and is the primary remediation vehicle.
Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 expose a high-severity flaw in the Runtime Tools component that allows a low-privileged, network-accessible attacker to gain complete read access to all portal-accessible data and perform limited data manipulation and partial denial of service via HTTP. The vulnerability is rated CVSS 7.6 and disclosed as part of Oracle's Critical Patch Update for August 2026. No public exploit code or CISA KEV listing has been identified at time of analysis, though the 'Authentication Bypass' tag in the intelligence metadata suggests potential elevation from low-privilege access that warrants close attention.
Oracle WebCenter Portal 14.1.2.0.0 exposes critical confidential data through an authentication bypass in its Runtime Tools component, reachable by any low-privileged user over HTTP. Oracle explicitly classifies this as 'easily exploitable' and assigns a scope-change designation (S:C), meaning successful exploitation can spill over into additional Oracle Fusion Middleware products integrated with the portal. No public exploit code or CISA KEV listing exists at time of analysis, but the low attack complexity and broad network accessibility make this straightforward to trigger once the bypass mechanism is understood.
Authentication bypass in Oracle WebCenter Portal's Runtime Tools component allows unauthenticated remote attackers to compromise confidentiality and integrity of critical portal data across affected versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability carries a CVSS 3.1 score of 8.7 with scope change (S:C), meaning successful exploitation can cascade beyond WebCenter Portal to impact additional products within the Oracle Fusion Middleware stack. No public exploit code has been identified at time of analysis, and high attack complexity (AC:H) limits opportunistic exploitation, though the authentication bypass nature and scope change elevate priority for Oracle-heavy environments.
Oracle WebCenter Portal Runtime Tools component in versions 12.2.1.4.0 and 14.1.2.0.0 allows low-privileged, network-authenticated attackers to bypass authorization controls and achieve full read and write access to critical portal data via HTTP. The vulnerability is tagged as an Authentication Bypass, meaning an authenticated user with minimal privileges can escalate access beyond their intended authorization boundary. No public exploit has been identified at time of analysis, and it is not currently listed in the CISA KEV catalog, though the low attack complexity makes it a realistic threat in any environment where untrusted low-privileged accounts exist.
Oracle WebCenter Portal's Runtime Tools component in versions 12.2.1.4.0 and 14.1.2.0.0 is exploitable over HTTP by unauthenticated remote attackers, subject to victim user interaction, enabling unauthorized modification or deletion of portal data and a partial denial of service. The CVSS:3.1/AV:N/AC:L/PR:N/UI:R vector confirms low-complexity network exploitation requiring no credentials, only that a victim user be induced to interact with attacker-controlled content. No public exploit code or CISA KEV listing has been identified at time of analysis; this was disclosed as part of Oracle's August 2026 Critical Patch Update.
Compromise of Oracle WebCenter Portal's Composer component - versions 12.2.1.4.0 and 14.1.2.0.0 - allows an authenticated low-privilege attacker over HTTP to achieve high-integrity impact, including unauthorized creation, deletion, and modification of critical portal data, limited confidentiality exposure, and partial denial of service. The CVSS scope change (S:C) indicates exploitation can cascade to additional Oracle Fusion Middleware products beyond WebCenter Portal itself. Disclosed in Oracle's August 2026 Critical Security Patch Update; no public exploit code or CISA KEV listing has been identified at time of analysis.
Full takeover of Oracle WebCenter Portal is achievable by a low-privileged network attacker targeting the Composer component via Java RMI in versions 12.2.1.4.0 and 14.1.2.0.0. Oracle describes the vulnerability as 'easily exploitable,' with the CVSS 3.1 score of 8.8 reflecting complete Confidentiality, Integrity, and Availability compromise upon successful exploitation. No public exploit code has been identified at time of analysis, and this CVE has not appeared in the CISA Known Exploited Vulnerabilities catalog, though it is disclosed as part of Oracle's Critical Patch Update for August 2026.
Privilege-escalating account/system takeover in Oracle WebCenter Portal (Fusion Middleware, Composer component) versions 12.2.1.4.0 and 14.1.2.0.0 lets an authenticated low-privileged attacker reach full compromise over HTTP. Because the flaw carries a scope change (S:C), successful exploitation can pivot beyond WebCenter Portal to impact additional products, and Oracle rates it CVSS 9.9. No public exploit identified at time of analysis, but the near-maximum score, low attack complexity, and minimal privilege requirement make it a top-tier patch priority.
Full takeover of Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 is achievable by a low-privileged, network-authenticated attacker targeting the Composer component over HTTP. Oracle's own advisory characterizes the vulnerability as 'easily exploitable,' with high impact across confidentiality, integrity, and availability and no user interaction required. No public exploit or CISA KEV listing exists at time of analysis, but the combination of low attack complexity, low privilege requirement, and complete portal compromise warrants urgent patching priority for all affected deployments.
Unauthenticated data compromise and denial of service in Oracle WebCenter Portal (Fusion Middleware, Portlet Services component) affects supported versions 12.2.1.4.0 and 14.1.2.0.0. A remote attacker with only HTTP network access and no credentials can read or fully access all portal-accessible data and can force a hang or repeatable crash (complete DoS) of the portal. Oracle rates it CVSS 3.1 9.1 and flags it as easily exploitable; no public exploit has been identified at time of analysis and it is not listed in CISA KEV.
Full compromise of Oracle WebCenter Portal (Fusion Middleware, Runtime Tools component) affects versions 12.2.1.4.0 and 14.1.2.0.0, where a low-privileged attacker with HTTP network access can take over the portal and, because of a scope change, significantly impact other products. Oracle rates this CVSS 3.1 9.9 (Critical) with high confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and minimal privilege requirement make it a high-priority patch item.
Full product takeover of Oracle WebCenter Portal (versions 12.2.1.4.0 and 14.1.2.0.0) is possible by a remote, unauthenticated attacker over HTTP against the Runtime Tools component. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:H, base 9.8) reflects that no credentials, user interaction, or special conditions are needed, and a successful attack fully compromises confidentiality, integrity, and availability. This is a July 2026 Oracle Critical Patch Update item with no public exploit identified at time of analysis and no CISA KEV listing.
Full takeover of Oracle WebCenter Portal (Fusion Middleware, Runtime Tools component) is achievable by a low-privileged attacker with network access over HTTP, per Oracle's July 2026 Critical Patch Update. Because the flaw carries a scope change (S:C), successful exploitation can significantly impact additional products beyond WebCenter Portal itself, driving the CVSS 3.1 base score to 9.9. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Privilege/authorization bypass in Oracle WebCenter Portal (Fusion Middleware, Runtime Tools component) versions 12.2.1.4.0 and 14.1.2.0.0 lets a low-privileged, authenticated network attacker read and modify all portal-accessible data over HTTP. The scope-changing flaw (CVSS 3.1 base 9.6) can significantly impact additional products beyond the portal itself and is tagged as an authentication bypass. No public exploit identified at time of analysis and it is not listed in CISA KEV; disclosed via the Oracle Critical Patch Update of July 2026.
Full account/system takeover in Oracle WebCenter Portal (versions 12.2.1.4.0 and 14.1.2.0.0, Runtime Tools component) allows an authenticated low-privileged attacker to compromise the product over HTTP and gain complete control. Oracle rates this 'easily exploitable' with CVSS 8.8 (C:H/I:H/A:H), meaning any user with minimal portal credentials can escalate to full compromise. No public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and Oracle's own 'easily exploitable' characterization make it a high-priority patch.
Privilege-escalating account takeover in Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 (Runtime Tools component) lets a low-privileged, network-authenticated attacker fully compromise the portal over HTTP and, because of a scope change (S:C), pivot into other components of the Oracle Fusion Middleware stack. Oracle rates it CVSS 9.9 with full confidentiality, integrity, and availability loss, and describes it as 'easily exploitable.' There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the low attack complexity and minimal privilege requirement make it a high-priority patch.
Account/instance takeover in Oracle WebCenter Portal (Fusion Middleware component: Runtime Tools) lets a low-privileged remote attacker fully compromise affected 12.2.1.4.0 and 14.1.2.0.0 deployments over HTTP. Because the flaw carries a scope change (S:C), successful exploitation can spill beyond the portal into other Fusion Middleware components, and Oracle rates full confidentiality, integrity, and availability impact (CVSS 3.1 base 9.9). No public exploit has been identified at time of analysis, but the low attack complexity and 'easily exploitable' vendor wording make this a high-priority patch item.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Content integration). Rated medium severity (CVSS 4.4), this vulnerability is remotely exploitable. No vendor patch available.
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.
CKEditor4 is an open source WYSIWYG HTML editor. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
CKEditor4 is an open source WYSIWYG HTML editor. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. This Unrestricted File Upload vulnerability could allow attackers to upload malicious files that can be executed on the server.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. This Unrestricted File Upload vulnerability could allow attackers to upload malicious files that can be executed on the server.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.
XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Unrestricted File Upload vulnerability could allow attackers to upload malicious files that can be executed on the server.
jsoup is a Java library for working with HTML. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
XStream is software for serializing Java objects to XML and back again. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.
A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.
XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
XStream is a Java library to serialize objects to XML and back again. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
XStream is a Java library to serialize objects to XML and back again. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.
XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.