Oracle WebCenter Sites vulnerabilities
44 known CVE vulnerabilities in Oracle WebCenter Sites, translated and rated.
- CVE-2017-3596High
A vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows a low privileged attacker to access critical data. The attacker can gain unauthorized access to data and has the ability to update, insert, or delete data.
- CVE-2017-3543High
A vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. The attacker can gain unauthorized access to critical data and has the ability to update, insert, or delete data.
- CVE-2017-3542High
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Sites. Attackers can gain access to critical data and perform unauthorized operations on the data.
- CVE-2017-3541High
A vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks can lead to unauthorized access to critical data and complete access to all accessible data.
- CVE-2017-3540High
A vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system. The attacker can cause hangs or frequent crashes of Oracle WebCenter Sites and gain unauthorized access to data.
- CVE-2016-3487High
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
- CVE-2026-61034Critical
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows a high-privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 9.1.
- CVE-2026-61029Critical
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 9.0.
- CVE-2026-61021Critical
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 9.9.
- CVE-2026-61018Critical
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).
- CVE-2026-61008Critical
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data and unauthorized access to data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).
- CVE-2026-61140Critical
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) version 14.1.2.0.0. An unauthenticated attacker can take over the content management system via HTTP.
- CVE-2026-60555Critical
Vulnerability in Oracle WebCenter Sites allows an unauthenticated attacker to remotely take over the system via HTTP. It requires only network access and no privileges or user interaction.
- CVE-2026-60552Critical
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can compromise the system, potentially impacting other products.
- CVE-2026-60551Critical
Vulnerability in Oracle WebCenter Sites allows an unauthenticated attacker to remotely take over the system via HTTP. It requires only network access and no privileges or user interaction.
- CVE-2026-46809Critical
A vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware allows unauthenticated attackers with network access via HTTP to compromise the system. Attackers can gain unauthorized access to critical data and have the ability to create, delete, or modify it.
- CVE-2026-46801Critical
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-46800Critical
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-46799Critical
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-46798Critical
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-46797Critical
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. It affects versions 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-35296Critical
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-35293Critical
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites) allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. The supported version affected is 14.1.2.0.0.
- CVE-2026-61058High
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can compromise the system over HTTP. Easily exploitable, CVSS 8.8.
- CVE-2026-61054High
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can gain unauthorized access to critical data and modify some data over HTTP. CVSS 8.2.
- CVE-2026-61045High
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise the system, leading to unauthorized access to critical data or all accessible data, unauthorized update/insert/delete operations, and partial denial of service.
- CVE-2026-61042High
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can fully compromise the system, resulting in takeover.
- CVE-2026-61040High
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can fully compromise the system, resulting in takeover.
- CVE-2026-61038High
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data, and perform unauthorized update/insert/delete operations.
- CVE-2026-61033High
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise the system, leading to unauthorized access to critical data or all accessible data, unauthorized update/insert/delete operations, and partial denial of service.
- CVE-2026-61032High
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can fully compromise the system, resulting in takeover.
- CVE-2026-61022High
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can fully compromise the system, resulting in takeover.
- CVE-2026-61017High
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can fully compromise the system, resulting in takeover.
- CVE-2026-61016High
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can perform unauthorized creation, deletion, or modification of critical data or all accessible data, and cause partial denial of service.
- CVE-2026-61011High
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can perform unauthorized creation, deletion, or modification of critical data or all accessible data, and cause partial denial of service.
- CVE-2026-61007High
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) in versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by an unauthenticated attacker over HTTP, allowing unauthorized access to critical data or complete access to all WebCenter Sites data. CVSS 7.5 (confidentiality impact).
- CVE-2026-60558High
Vulnerability in Oracle WebCenter Sites (part of Oracle Fusion Middleware) allows an unauthenticated attacker via HTTP to take over the system. Exploitation is difficult.
- CVE-2026-60557Medium
Vulnerability in Oracle WebCenter Sites (component: WebCenter Sites) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by an unauthenticated attacker with network access via HTTP, requiring user interaction. Successful attack can result in unauthorized access to critical data or complete access to all WebCenter Sites data. CVSS 6.5 (Confidentiality).
- CVE-2026-60556High
Vulnerability in Oracle WebCenter Sites allows an unauthenticated attacker to remotely compromise confidential data. The attack may impact other products (scope change).
- CVE-2026-60554High
Vulnerability in Oracle WebCenter Sites allows an unauthenticated attacker to access critical data via HTTP. The attack does not affect other products.
- CVE-2026-60550High
Vulnerability in Oracle WebCenter Sites allows an unauthenticated attacker to remotely compromise confidential data. The attack may impact other products (scope change).
- CVE-2026-46796High
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction, increasing the likelihood of success.
- CVE-2026-35318High
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Affects versions 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-35295High
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.

