← Back

CVE-2026-60563

nvd nist
Published: Jul 21, 2026Modified: Aug 1, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: secalert_us@oracle.com (Secondary)

Description

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected (2)

Oracle
1 product
Webcenter Portal
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Webcenter Portal
Version 12.2.1.4.0
Webcenter Portal
Version 14.1.2.0.0

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (1)

Source: secalert_us@oracle.com
Vendor Advisory

Timeline

No history available yet.