WS
Product
Webcenter Sites
On CISA KEVExploited in the wild
90
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 23High 43Medium 20Low 2
Watch
Add Webcenter Sites to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-12617 In wildKEV | 8.1 | Oct 3 | When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g Affected: 11.1.1.8.0 |
| CVE-2020-11023 In wildKEV | 6.1 | Apr 29 | Potential XSS vulnerability in jQuery Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2026-46800 | 10.0 | Jun 16 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-46798 | 10.0 | Jun 16 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61021 | 9.9 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-60552 | 9.9 | Jul 21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61018 | 9.8 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61140 | 9.8 | Jul 21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 14.1.2.0.0 |
| CVE-2026-60555 | 9.8 | Jul 21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-60551 | 9.8 | Jul 21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-46801 | 9.8 | Jun 16 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-46799 | 9.8 | Jun 16 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-46797 | 9.8 | Jun 16 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-35296 | 9.8 | Jun 16 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-35293 | 9.8 | Jun 16 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2019-17531 | 9.8 | Oct 12 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10 Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-16943 | 9.8 | Oct 1 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10 Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-16942 | 9.8 | Oct 1 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10 Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-13990 | 9.8 | Jul 26 | initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-0228 | 9.8 | Apr 17 | Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2015-3253 | 9.8 | Aug 13 | The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a… Affected: 11.1.1.8.0; 12.2.1 |
| CVE-2026-61034 | 9.1 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61008 | 9.1 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-46809 | 9.1 | Jun 16 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61029 | 9.0 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61058 | 8.8 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61042 | 8.8 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61040 | 8.8 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61032 | 8.8 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61022 | 8.8 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61017 | 8.8 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-35318 | 8.8 | Jun 16 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2021-29505 | 8.8 | May 28 | XStream is vulnerable to a Remote Command Execution attack Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2026-60553 | 8.7 | Jul 21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61045 | 8.6 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61033 | 8.6 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-60556 | 8.6 | Jul 21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-60550 | 8.6 | Jul 21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2019-2578 | 8.6 | Apr 23 | Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI) Affected: 12.2.1.3.0 |
| CVE-2017-3543 | 8.6 | Apr 24 | Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server) Affected: 11.1.1.8.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0 |
| CVE-2017-3542 | 8.6 | Apr 24 | Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server) Affected: 11.1.1.8.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0 |
| CVE-2017-3540 | 8.6 | Apr 24 | Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server) Affected: 11.1.1.8.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0 |
| CVE-2026-61054 | 8.2 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61038 | 8.2 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61016 | 8.2 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-61011 | 8.2 | Aug 18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2018-2791 | 8.2 | Apr 19 | Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI) Affected: 11.1.1.8.0; 12.2.1.2.0; 12.2.1.3.0 |
| CVE-2017-3545 | 8.2 | Apr 24 | Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Blob Server) Affected: 11.1.1.8.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0 |
| CVE-2017-3541 | 8.2 | Apr 24 | Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server) Affected: 11.1.1.8.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0 |
| CVE-2026-60558 | 8.1 | Jul 21 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) Affected: 12.2.1.4.0; 14.1.2.0.0 |