CVE-2014-4257
HighSummary
Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.8.0 allows remote attackers to affect confidentiality via unknown vectors related to Portlet Services.
Risk Assessment
This vulnerability may lead to a breach of information confidentiality within the organization, potentially resulting in data loss or unauthorized disclosure.
Recommendation
It is recommended to upgrade to the latest version of Oracle Fusion Middleware and to monitor systems for potential exploitation attempts.
Other vulnerabilities in Oracle WebCenter Portal
See all- CVE-2026-70970Critical
Vulnerability in Oracle WebCenter Portal (component: Runtime Tools) allows an unauthenticated attacker with network access via HTTP to compromise the system. The attack is easily exploitable and requires no user interaction.
- CVE-2026-60730Critical
Vulnerability in Oracle WebCenter Portal (component: Composer) allows a low-privileged attacker via HTTP to take over the portal. The attack may impact other products (scope change). CVSS score 9.9.
- CVE-2026-60728Critical
Vulnerability in Oracle WebCenter Portal (component: Portlet Services) allows an unauthenticated attacker via HTTP to gain unauthorized data access and cause hangs or frequent crashes (DoS). CVSS score 9.1.
- CVE-2026-60568Critical
Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by a low privileged attacker with network access via HTTP. Attacks may impact additional products (scope change). Successful attack can lead to full system takeover.
- CVE-2026-60566Critical
Vulnerability in Oracle WebCenter Portal (Runtime Tools component) allows unauthenticated attacker via HTTP to take over the system. CVSS 9.8.
- CVE-2026-60565Critical
Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can compromise the portal, potentially impacting other products.
- CVE-2026-60564Critical
Vulnerability in Oracle WebCenter Portal (Runtime Tools component) allows a low-privileged attacker via HTTP to gain unauthorized access to critical data and modify it. The attack may affect other products (scope change).
- CVE-2026-60562Critical
Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by a low privileged attacker with network access via HTTP. Attacks may impact additional products (scope change). Successful attack can lead to full system takeover.
- CVE-2026-60561Critical
Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can compromise the portal, potentially impacting other products.
- CVE-2026-46844Critical
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTPS to compromise the portal. Attacks may also significantly impact additional products.
Original NVD description (English source)
Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.8.0 allows remote attackers to affect confidentiality via unknown vectors related to Portlet Services.