WP
Product
Webcenter Portal
On CISA KEVExploited in the wild
153
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 56High 82Medium 15Low 0
Watch
Add Webcenter Portal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-35728 | 8.1 | Dec 27 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2020-28052 | 8.1 | Dec 18 | An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66 Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2020-35490 | 8.1 | Dec 17 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2020-35491 | 8.1 | Dec 17 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2026-83048 | 7.7 | Sep 15 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-83041 | 7.7 | Sep 15 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61199 | 7.7 | Aug 18 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools) Affected: 14.1.2.0.0 |
| CVE-2026-60733 | 7.7 | Aug 18 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-83052 | 7.6 | Sep 15 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61227 | 7.6 | Aug 18 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61208 | 7.6 | Aug 18 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-83051 | 7.5 | Sep 15 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-83034 | 7.5 | Sep 15 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2021-37136 | 7.5 | Oct 19 | The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression) Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-37137 | 7.5 | Oct 19 | The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-37714 | 7.5 | Aug 18 | Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-35516 | 7.5 | Jul 13 | When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-36090 | 7.5 | Jul 13 | Apache Commons Compress 1.0 to 1.20 denial of service vulnerability Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-35517 | 7.5 | Jul 13 | Apache Commons Compress 1.1 to 1.20 denial of service vulnerability Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-21348 | 7.5 | Mar 22 | XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-21341 | 7.5 | Mar 22 | XStream can cause a Denial of Service Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-21343 | 7.5 | Mar 22 | XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2020-25649 | 7.5 | Dec 3 | A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2020-11612 | 7.5 | Apr 7 | The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-17359 | 7.5 | Oct 8 | The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-12402 | 7.5 | Aug 30 | The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-0227 | 7.5 | May 1 | A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006 Affected: 12.2.1.3.0 |
| CVE-2018-3246 | 7.5 | Oct 17 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services) Affected: 11.1.1.9.0; 12.2.1.3.0 |
| CVE-2018-1000180 | 7.5 | Jun 5 | Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in… Affected: 11.1.1.9.0; 12.2.1.3.0 |
| CVE-2026-83050 | 7.1 | Sep 15 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-83046 | 7.1 | Sep 15 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61124 | 7.1 | Aug 18 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools) Affected: 12.2.1.4.0; 14.1.2.0.0 |