Webcenter Sites (Oracle) - vulnerabilities (CVEs)

103 CVEs, 4 in the last 30 days, 12 known versions, newest CVE from 2026-10-20. Vendor: Oracle.

CVEs of Webcenter Sites

• CVE-2026-91552 - CVSS 7.5 (high), 2026-10-20: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-91542 - CVSS 7.5 (high), 2026-10-20: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-91240 - CVSS 5.9 (medium), 2026-10-20: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-101499 - CVSS 9.8 (critical), 2026-10-20: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-83037 - CVSS 9.8 (critical), 2026-09-15: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-83034 - CVSS 7.5 (high), 2026-09-15: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-83036 - CVSS 9.8 (critical), 2026-09-15: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-83035 - CVSS 9.8 (critical), 2026-09-15: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-83031 - CVSS 9.9 (critical), 2026-09-15: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-83033 - CVSS 8.8 (high), 2026-09-15: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-83032 - CVSS 8.8 (high), 2026-09-15: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61058 - CVSS 8.8 (high), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61054 - CVSS 8.2 (high), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61045 - CVSS 8.6 (high), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61042 - CVSS 8.8 (high), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61040 - CVSS 8.8 (high), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61038 - CVSS 8.2 (high), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61034 - CVSS 9.1 (critical), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61033 - CVSS 8.6 (high), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61032 - CVSS 8.8 (high), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61029 - CVSS 9 (critical), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61022 - CVSS 8.8 (high), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61018 - CVSS 9.8 (critical), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61021 - CVSS 9.9 (critical), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61017 - CVSS 8.8 (high), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61016 - CVSS 8.2 (high), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61011 - CVSS 8.2 (high), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61008 - CVSS 9.1 (critical), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61007 - CVSS 7.5 (high), 2026-08-18: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-61140 - CVSS 9.8 (critical), 2026-07-21: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). The supported version that is affected is…
• CVE-2026-60558 - CVSS 8.1 (high), 2026-07-21: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-60555 - CVSS 9.8 (critical), 2026-07-21: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-60557 - CVSS 6.5 (medium), 2026-07-21: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-60556 - CVSS 8.6 (high), 2026-07-21: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-60554 - CVSS 7.5 (high), 2026-07-21: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-60553 - CVSS 8.7 (high), 2026-07-21: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-60552 - CVSS 9.9 (critical), 2026-07-21: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-60551 - CVSS 9.8 (critical), 2026-07-21: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-60550 - CVSS 8.6 (high), 2026-07-21: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-46809 - CVSS 9.1 (critical), 2026-06-16: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-46800 - CVSS 10 (critical), 2026-06-16: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-46801 - CVSS 9.8 (critical), 2026-06-16: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-46798 - CVSS 10 (critical), 2026-06-16: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-46799 - CVSS 9.8 (critical), 2026-06-16: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-46797 - CVSS 9.8 (critical), 2026-06-16: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-46796 - CVSS 8 (high), 2026-06-16: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-35318 - CVSS 8.8 (high), 2026-06-16: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-35296 - CVSS 9.8 (critical), 2026-06-16: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-35295 - CVSS 7.5 (high), 2026-06-16: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are…
• CVE-2026-35293 - CVSS 9.8 (critical), 2026-06-16: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). The supported version that is affected is…
• CVE-2024-20908 - CVSS 6.1 (medium), 2024-01-16: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported version that is affected is…
• CVE-2021-45105 - CVSS 5.9 (medium), 2021-12-18: Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This…
• CVE-2021-32808 - CVSS 7.6 (high), 2021-08-12: ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside…
• CVE-2021-29505 - CVSS 8.8 (high), 2021-05-28: XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has…
• CVE-2021-27807 - CVSS 5.5 (medium), 2021-03-19: A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
• CVE-2021-27906 - CVSS 5.5 (medium), 2021-03-19: A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x…
• CVE-2021-26272 - CVSS 6.5 (medium), 2021-01-26: It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then…
• CVE-2021-26271 - CVSS 6.5 (medium), 2021-01-26: It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific…
• CVE-2020-14613 - CVSS 6.1 (medium), 2020-07-15: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced User Interface). Supported versions that are affected are…
• CVE-2020-11023 - CVSS 6.9 (medium), 2020-04-29: In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing…
• CVE-2020-2739 - CVSS 7.4 (high), 2020-04-15: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported version that is affected is…
• CVE-2020-5258 - CVSS 7.7 (high), 2020-03-10: In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject…
• CVE-2020-7226 - CVSS 7.5 (high), 2020-01-24: CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode…
• CVE-2020-2539 - CVSS 6.1 (medium), 2020-01-15: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported version that is affected is…
• CVE-2020-2538 - CVSS 7.1 (high), 2020-01-15: Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported version that is affected is…
• CVE-2019-12415 - CVSS 5.5 (medium), 2019-10-23: In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an…
• CVE-2019-17531 - CVSS 9.8 (critical), 2019-10-12: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a…
• CVE-2019-16942 - CVSS 9.8 (critical), 2019-10-01: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a…
• CVE-2019-16943 - CVSS 9.8 (critical), 2019-10-01: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a…
• CVE-2019-13990 - CVSS 9.8 (critical), 2019-07-26: initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.
• CVE-2019-2578 - CVSS 8.6 (high), 2019-04-23: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is…
• CVE-2019-2579 - CVSS 4.3 (medium), 2019-04-23: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is…
• CVE-2019-5427 - CVSS 7.5 (high), 2019-04-22: c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity…
• CVE-2019-11358 - CVSS 6.1 (medium), 2019-04-20: jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an…
• CVE-2019-0228 - CVSS 9.8 (critical), 2019-04-17: Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a…
• CVE-2018-15756 - CVSS 7.5 (high), 2018-10-18: Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide…
• CVE-2018-3238 - CVSS 6.9 (medium), 2018-10-17: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is…
• CVE-2018-2791 - CVSS 8.2 (high), 2018-04-19: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are…
• CVE-2015-9251 - CVSS 6.1 (medium), 2018-01-18: jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing…
• CVE-2018-2584 - CVSS 4.3 (medium), 2018-01-18: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is…
• CVE-2017-10033 - CVSS 4 (medium), 2017-10-19: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Support Tools). Supported versions that are affected are…
• CVE-2017-12617 - CVSS 8.1 (high), 2017-10-04: When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the…
• CVE-2017-3603 - CVSS 3.1 (low), 2017-04-24: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are…
• CVE-2017-3602 - CVSS 8.1 (high), 2017-04-24: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are…
• CVE-2017-3591 - CVSS 7.1 (high), 2017-04-24: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover). Supported versions that are affected are…
• CVE-2017-3595 - CVSS 7.1 (high), 2017-04-24: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are…
• CVE-2017-3598 - CVSS 3.1 (low), 2017-04-24: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are…
• CVE-2017-3594 - CVSS 5.9 (medium), 2017-04-24: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are…
• CVE-2017-3597 - CVSS 5.7 (medium), 2017-04-24: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are…
• CVE-2017-3593 - CVSS 7.1 (high), 2017-04-24: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are…
• CVE-2017-3596 - CVSS 7.6 (high), 2017-04-24: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are…
• CVE-2017-3543 - CVSS 8.6 (high), 2017-04-24: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0,…
• CVE-2017-3542 - CVSS 8.6 (high), 2017-04-24: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0,…
• CVE-2017-3554 - CVSS 8.1 (high), 2017-04-24: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover). Supported versions that are affected are…
• CVE-2017-3541 - CVSS 8.2 (high), 2017-04-24: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0,…
• CVE-2017-3545 - CVSS 8.2 (high), 2017-04-24: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Blob Server). Supported versions that are affected are…
• CVE-2017-3540 - CVSS 8.6 (high), 2017-04-24: Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0,…
• CVE-2016-5511 - CVSS 4.3 (medium), 2016-10-25: Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 12.2.1.0.0, 12.2.1.1.0, and 12.2.1.2.0 allows remote attackers…
• CVE-2016-3502 - CVSS 6.5 (medium), 2016-07-21: Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8 and 12.2.1.0 allows remote authenticated users to…
• CVE-2016-3487 - CVSS 8.1 (high), 2016-07-21: Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8, and 12.2.1.0 allows remote attackers to affect…