CVE-2026-61229

HighCVSS 8.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

20th percentile - higher than 20% of all known CVEs

Summary

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows unauthenticated attacker to take over the portal.

Risk Assessment

Risk of complete takeover of the portal, potentially leading to compromise of confidentiality, integrity, and availability of data.

Recommendation

Apply patches from Oracle for Oracle WebCenter Portal. Restrict access to the HTTP service and implement additional network security measures.

Original NVD description (English source)

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).