Oracle WebCenter Portal vulnerabilities

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects version 14.1.2.0.0. A low-privileged attacker can gain unauthorized access to critical data or all portal data over HTTP. Attacks may impact additional products. CVSS 7.7.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can gain unauthorized access to critical data and modify, delete, or create data over HTTP (difficult to exploit). Attacks may impact additional products. CVSS 8.7.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can gain unauthorized access to critical data and modify, delete, or create data over HTTP. CVSS 8.1.

Vulnerability in Oracle WebCenter Portal (component: Runtime Tools) affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can gain unauthorized access to critical data, modify it, and cause partial denial of service over HTTP, requiring user interaction. CVSS 7.1.

Vulnerability in Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows low privileged attacker via HTTP to gain unauthorized access to data (creation, deletion, modification), partial read access, and cause partial denial of service. Attack may impact other products (scope change).

Vulnerability in Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows low privileged attacker via RMI to take over Oracle WebCenter Portal.

Vulnerability in Oracle WebCenter Portal (component: Composer) in versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker can remotely compromise the system via HTTP. Successful attacks can result in takeover of Oracle WebCenter Portal.