Login Request a demo
WP
Product
Webcenter Portal
by Oracle · last CVE Sep 15, 2026
On CISA KEVExploited in the wild
153
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities153In the news0Timeline
Severity mix
Critical 56High 82Medium 15Low 0
Severity
All severities153Critical56High82Medium15Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Webcenter Portal to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-2555
In wildKEV
9.8
97%
Jan 15
Oracle Multiple Products Remote Code Execution Vulnerability
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-39144
In wildKEV
8.5
98%
Aug 23
XStream is vulnerable to a Remote Command Execution attack
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2026-46846
10.0
0%
Jun 16
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-46803
10.0
0%
Jun 16
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2018-14721
10.0
10%
Jan 2
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class…
Affected: 12.2.1.3.0
CVE-2026-83039
9.9
0%
Sep 15
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-83031
9.9
0%
Sep 15
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-73948
9.9
0%
Sep 15
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-60730
9.9
0%
Aug 18
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-60568
9.9
0%
Jul 21
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-60565
9.9
0%
Jul 21
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-60562
9.9
0%
Jul 21
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-60561
9.9
0%
Jul 21
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-46847
9.9
0%
Jun 16
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-46844
9.9
0%
Jun 16
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-46838
9.9
0%
Jun 16
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-46814
9.9
0%
Jun 16
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-46802
9.9
0%
Jun 16
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-46767
9.9
0%
Jun 16
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-46765
9.9
0%
Jun 16
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2021-21345
9.9
72%
Mar 22
XStream is vulnerable to a Remote Command Execution attack
Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2026-83037
9.8
1%
Sep 15
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-83036
9.8
1%
Sep 15
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-83035
9.8
1%
Sep 15
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-73963
9.8
1%
Sep 15
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-73956
9.8
1%
Sep 15
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-73953
9.8
1%
Sep 15
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-70970
9.8
1%
Aug 18
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-60566
9.8
1%
Jul 21
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-46845
9.8
0%
Jun 16
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2021-21350
9.8
15%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-21344
9.8
76%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-21346
9.8
76%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2021-21347
9.8
14%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-10683
9.8
7%
May 1
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks
Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2019-20330
9.8
9%
Jan 3
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2019-17531
9.8
5%
Oct 12
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2019-16943
9.8
5%
Oct 1
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2019-16942
9.8
6%
Oct 1
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2019-10173
9.8
95%
Jul 23
It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw
Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2018-14719
9.8
10%
Jan 2
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from…
Affected: 12.2.1.3.0
CVE-2018-19362
9.8
11%
Jan 2
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic…
Affected: 12.2.1.3.0
CVE-2018-19361
9.8
11%
Jan 2
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization
Affected: 12.2.1.3.0
CVE-2018-19360
9.8
11%
Jan 2
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic…
Affected: 12.2.1.3.0
CVE-2018-14720
9.8
8%
Jan 2
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from…
Affected: 12.2.1.3.0
CVE-2018-14718
9.8
13%
Jan 2
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic…
Affected: 12.2.1.3.0
CVE-2018-1000613
9.8
5%
Jul 9
Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select…
Affected: 11.1.1.9.0; 12.2.1.3.0
CVE-2017-15095
9.8
8%
Feb 6
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending…
Affected: 12.2.1.3.0
CVE-2017-7525
9.8
38%
Feb 6
A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by…
Affected: 12.2.1.3.0
CVE-2026-83043
9.6
0%
Sep 15
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)
Affected: 12.2.1.4.0; 14.1.2.0.0
Page 1 of 4 · 153 total
12…4