Login Request a demo
WS
Product
Webcenter Sites
by Oracle · last CVE Aug 18, 2026
On CISA KEVExploited in the wild
90
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities90In the news0Timeline
Severity mix
Critical 23High 43Medium 20Low 2
Severity
All severities90Critical23High43Medium20Low2
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Webcenter Sites to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-12617
In wildKEV
8.1
100%
Oct 3
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g
Affected: 11.1.1.8.0
CVE-2026-61058
8.8
0%
Aug 18
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61042
8.8
0%
Aug 18
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61040
8.8
0%
Aug 18
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61032
8.8
0%
Aug 18
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61022
8.8
0%
Aug 18
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61017
8.8
0%
Aug 18
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-35318
8.8
0%
Jun 16
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2021-29505
8.8
77%
May 28
XStream is vulnerable to a Remote Command Execution attack
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2026-60553
8.7
0%
Jul 21
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61045
8.6
0%
Aug 18
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61033
8.6
0%
Aug 18
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-60556
8.6
0%
Jul 21
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-60550
8.6
0%
Jul 21
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2019-2578
8.6
71%
Apr 23
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI)
Affected: 12.2.1.3.0
CVE-2017-3543
8.6
2%
Apr 24
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server)
Affected: 11.1.1.8.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2017-3542
8.6
2%
Apr 24
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server)
Affected: 11.1.1.8.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2017-3540
8.6
2%
Apr 24
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server)
Affected: 11.1.1.8.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2026-61054
8.2
0%
Aug 18
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61038
8.2
0%
Aug 18
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61016
8.2
0%
Aug 18
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-61011
8.2
0%
Aug 18
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2018-2791
8.2
38%
Apr 19
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI)
Affected: 11.1.1.8.0; 12.2.1.2.0; 12.2.1.3.0
CVE-2017-3545
8.2
2%
Apr 24
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Blob Server)
Affected: 11.1.1.8.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2017-3541
8.2
2%
Apr 24
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server)
Affected: 11.1.1.8.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2026-60558
8.1
0%
Jul 21
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2017-3602
8.1
2%
Apr 24
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI)
Affected: 11.1.1.8.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2017-3554
8.1
2%
Apr 24
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover)
Affected: 11.1.1.8.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2016-3487
8.1
5%
Jul 21
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity,…
Affected: 11.1.1.8; 12.2.1.0
CVE-2026-46796
8.0
0%
Jun 16
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2020-5258
7.7
4%
Mar 10
Prototype pollution in dojo
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2017-3596
7.6
2%
Apr 24
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI)
Affected: 11.1.1.8.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2026-61007
7.5
0%
Aug 18
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-60554
7.5
0%
Jul 21
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-35295
7.5
0%
Jun 16
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2020-7226
7.5
3%
Jan 24
CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2019-5427
7.5
5%
Apr 22
c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2018-15756
7.5
9%
Oct 18
DoS Attack via Range Requests
Affected: 12.2.1.3.0
CVE-2020-2739
7.4
2%
Apr 15
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI)
Affected: 12.2.1.3.0
CVE-2020-2538
7.1
1%
Jan 15
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI)
Affected: 12.2.1.3.0
CVE-2017-3595
7.1
2%
Apr 24
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI)
Affected: 11.1.1.8.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2017-3593
7.1
2%
Apr 24
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI)
Affected: 11.1.1.8.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2017-3591
7.1
2%
Apr 24
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover)
Affected: 11.1.1.8.0; 12.2.1.0.0; 12.2.1.1.0; 12.2.1.2.0
Showing 43