CVE-2026-61213

Oracle WebCenter Portal Runtime Tools in versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a network-based, low-complexity attack requiring only low privileges, enabling full system compromise (CVSS 8.8). No exploitation details are provided in the documents; Oracle's August 2026 CPU advisory i...

CVE-2026-61124

The Runtime Tools component of Oracle WebCenter Portal (versions 12.2.1.4.0 and 14.1.2.0.0) has a network-reachable, easily exploitable flaw requiring only human interaction. An unauthenticated attacker can achieve high-integrity data modification or deletion and partial denial of service. No exp...

CVE-2026-61118

...

CVE-2026-61054

...

CVE-2026-61058

...

CVE-2026-61042

CVE-2026-61042 affects Oracle WebCenter Sites (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability without user interaction to achieve full takeover of the application, with high impact on confidenti...

CVE-2026-61029

Oracle WebCenter Sites (component: WebCenter Sites) in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is vulnerable to a network-based attack. An unauthenticated remote attacker can compromise the application, potentially impacting additional products (scope change), with CVSS 9.0 critical ...

CVE-2026-61022

...

CVE-2026-61021

...

CVE-2026-61018

...

CVE-2026-61008

A critical (CVSS 9.1) unauthenticated, network-accessible HTTP vulnerability affects Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0, allowing full confidentiality and integrity compromise. Oracle's August 2026 security advisory is the remediation source. Exploitation details are not provided in...

CVE-2026-61008

...

CVE-2026-60996

CVE-2026-60996 affects Oracle Identity Manager Connector (Connectors and Connector Server component) in versions 12.2.1.4.0 and 14.1.2.1.0. A high-privileged network attacker can exploit it over HTTPS to gain unauthorized read/write access to all connector-accessible data with scope change. No sp...

CVE-2026-60993

...

CVE-2026-60983

A high-severity (CVSS 7.7) vulnerability in Oracle WebCenter Content's Content Server component (versions 14.1.2.0.0 and 12.2.1.4.0) allows a low-privileged attacker with network HTTP access to read critical data. No public exploit code or active exploitation details are provided in the documents...

CVE-2026-60981

...

CVE-2026-60970

A critical (CVSS 9.8) unauthenticated remote vulnerability in Oracle WebCenter Enterprise Capture Client Bundle (versions 12.2.1.4.0 and 14.1.2.0.0) allows network-based T3/IIOP attacks leading to full system compromise. No patch version or exploit details are provided; see Oracle's August 2026 s...

CVE-2026-60969

...

CVE-2026-60958

Oracle WebCenter Enterprise Capture (versions 12.2.1.4.0 and 14.1.2.0.0, Client Bundle component) has a critical flaw: an unauthenticated remote attacker can fully compromise the application over HTTP (CVSS 9.8). Oracle's August 2026 CPU advisory is referenced for patch details. No exploit code o...

CVE-2026-60967

The nVision component of Oracle PeopleSoft Enterprise PeopleTools (versions 8.61-8.63) is affected by a HIGH severity vulnerability (CVSS 8.8). An unauthenticated attacker with network access via HTTP can exploit it with low complexity, requiring only user interaction, to compromise the applicati...