Oracle WebCenter Portal vulnerabilities

Vulnerability in Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows low privileged attacker via HTTP to gain unauthorized access to data (creation, deletion, modification), partial read access, and cause partial denial of service. Attack may impact other products (scope change).

Vulnerability in Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows low privileged attacker via RMI to take over Oracle WebCenter Portal.

Vulnerability in Oracle WebCenter Portal (component: Composer) in versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can remotely compromise the system via HTTP. Successful attacks can result in takeover of Oracle WebCenter Portal.