CVE-2026-83034
HighCVSS 7.5Summary
Vulnerability in Oracle WebCenter Sites (WebCenter Sites component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in Oracle WebCenter Sites. CVSS 3.1 Base Score 7.5.
Risk Assessment
No authentication is required, making the vulnerability easy to exploit remotely and potentially leading to exposure of critical data. The risk is high for organizations with publicly accessible Oracle WebCenter Sites instances.
Recommendation
Urgently apply Oracle patches for versions 12.2.1.4.0 and 14.1.2.0.0 and consider restricting public HTTP access to WebCenter Sites instances.
Other vulnerabilities in Oracle WebCenter Sites
See all- CVE-2026-83033High
Vulnerability in Oracle WebCenter Sites (WebCenter Sites component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low privileged attacker with network access via HTTP can take over Oracle WebCenter Sites. CVSS 3.1 Base Score 8.8.
- CVE-2026-83032High
Vulnerability in Oracle WebCenter Sites (WebCenter Sites component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low privileged attacker with network access via HTTP can take over Oracle WebCenter Sites. CVSS 3.1 Base Score 8.8.
- CVE-2017-3596High
A vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows a low privileged attacker to access critical data. The attacker can gain unauthorized access to data and has the ability to update, insert, or delete data.
- CVE-2017-3543High
A vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. The attacker can gain unauthorized access to critical data and has the ability to update, insert, or delete data.
- CVE-2017-3542High
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Sites. Attackers can gain access to critical data and perform unauthorized operations on the data.
- CVE-2017-3541High
A vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks can lead to unauthorized access to critical data and complete access to all accessible data.
- CVE-2017-3540High
A vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system. The attacker can cause hangs or frequent crashes of Oracle WebCenter Sites and gain unauthorized access to data.
- CVE-2016-3487High
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
- CVE-2026-83037Critical
Vulnerability in Oracle WebCenter Sites (WebCenter Sites component) of Oracle Fusion Middleware. Affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can easily compromise Oracle WebCenter Sites.
- CVE-2026-83036Critical
Vulnerability in Oracle WebCenter Sites (WebCenter Sites component) of Oracle Fusion Middleware. Affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can easily compromise Oracle WebCenter Sites.
Original NVD description (English source)
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).