Login Request a demo
WP
Product
Webcenter Portal
by Oracle · last CVE Sep 15, 2026
On CISA KEVExploited in the wild
153
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities153In the news0Timeline
Severity mix
Critical 56High 82Medium 15Low 0
Severity
All severities153Critical56High82Medium15Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Webcenter Portal to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-39144
In wildKEV
8.5
98%
Aug 23
XStream is vulnerable to a Remote Command Execution attack
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2026-83033
8.8
0%
Sep 15
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-83032
8.8
0%
Sep 15
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-73959
8.8
0%
Sep 15
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-73949
8.8
0%
Sep 15
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61213
8.8
0%
Aug 18
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-60731
8.8
0%
Aug 18
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-60729
8.8
0%
Aug 18
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-60563
8.8
0%
Jul 21
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2021-39139
8.8
5%
Aug 23
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-29505
8.8
77%
May 28
XStream is vulnerable to a Remote Command Execution attack
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-11113
8.8
6%
Mar 31
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2026-61219
8.7
0%
Aug 18
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61215
8.7
0%
Aug 18
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61193
8.7
0%
Aug 18
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61230
8.6
0%
Aug 18
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61228
8.6
0%
Aug 18
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2021-21349
8.6
47%
Mar 22
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-14611
8.6
1%
Jul 15
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2026-83049
8.5
0%
Sep 15
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-83045
8.5
0%
Sep 15
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61212
8.5
0%
Aug 18
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2021-39150
8.5
3%
Aug 23
A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-39152
8.5
11%
Aug 23
A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-39149
8.5
5%
Aug 23
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-39148
8.5
5%
Aug 23
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-39147
8.5
5%
Aug 23
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-39146
8.5
14%
Aug 23
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-39145
8.5
4%
Aug 23
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-39141
8.5
16%
Aug 23
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-39153
8.5
4%
Aug 23
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-39151
8.5
5%
Aug 23
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-39154
8.5
5%
Aug 23
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2026-83047
8.2
0%
Sep 15
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61222
8.2
0%
Aug 18
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2018-2713
8.2
2%
Jan 18
Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: WebCenter Spaces Application)
Affected: 11.1.1.9.0; 12.2.1.2.0; 12.2.1.3.0
CVE-2026-73951
8.1
0%
Sep 15
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61229
8.1
0%
Aug 18
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61177
8.1
0%
Aug 18
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2020-36182
8.1
4%
Jan 7
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-36180
8.1
4%
Jan 7
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-36179
8.1
17%
Jan 7
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-36184
8.1
8%
Jan 6
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-36181
8.1
4%
Jan 6
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-36183
8.1
5%
Jan 6
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-36185
8.1
4%
Jan 6
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-36186
8.1
4%
Jan 6
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-36187
8.1
4%
Jan 6
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-36188
8.1
9%
Jan 6
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-36189
8.1
4%
Jan 6
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 12.2.1.3.0; 12.2.1.4.0
Page 1 of 2 · 82 total
12