WP
Product
Webcenter Portal
On CISA KEVExploited in the wild
153
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 56High 82Medium 15Low 0
Watch
Add Webcenter Portal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-60564 | 9.6 | Jul 21 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-73957 | 9.3 | Sep 15 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-73952 | 9.1 | Sep 15 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-60728 | 9.1 | Aug 18 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2021-21351 | 9.1 | Mar 22 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-21342 | 9.1 | Mar 22 | A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |