WP
Product
Webcenter Portal
On CISA KEVExploited in the wild
153
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 56High 82Medium 15Low 0
Watch
Add Webcenter Portal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-14552 | 6.8 | Jul 15 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework) Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-39140 | 6.3 | Aug 23 | XStream can cause a Denial of Service Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2017-15707 | 6.2 | Dec 1 | In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially… Affected: 12.2.1.2.0; 12.2.1.3.0 |
| CVE-2020-9281 | 6.1 | Mar 7 | A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted… Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2018-8032 | 6.1 | Aug 2 | Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services Affected: 12.2.1.3.0 |
| CVE-2021-28657 | 5.5 | Mar 31 | A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25 Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2020-9489 | 5.5 | Apr 27 | A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-12415 | 5.5 | Oct 23 | In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files… Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-41165 | 5.4 | Nov 17 | CKEditor4 is an open source WYSIWYG HTML editor Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-41164 | 5.4 | Nov 17 | CKEditor4 is an open source WYSIWYG HTML editor Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-2427 | 5.3 | Jan 16 | Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: WebCenter Spaces Application) Affected: 11.1.1.9.0; 12.2.1.3.0 |
| CVE-2018-3254 | 5.3 | Oct 17 | Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: WebCenter Spaces Application) Affected: 11.1.1.9.0; 12.2.1.3.0 |
| CVE-2018-3101 | 5.3 | Jul 18 | Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: Portlet Services) Affected: 11.1.1.9.0; 12.2.1.2.0; 12.2.1.3.0 |
| CVE-2021-29425 | 4.8 | Apr 13 | Possible limited path traversal vulnerabily in Apache Commons IO Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2024-20992 | 4.4 | Apr 16 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Content integration) Affected: 12.2.1.4.0 |
Showing 15