Oracle

Webcenter Sites

99 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2026-46799

  • EPSS 0.47%
  • Veröffentlicht 16.06.2026 19:27:23
  • Zuletzt bearbeitet 16.06.2026 19:27:23

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with ...

8

CVE-2026-46796

  • EPSS 0.35%
  • Veröffentlicht 16.06.2026 19:27:22
  • Zuletzt bearbeitet 16.06.2026 19:27:22

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with n...

8.8

CVE-2026-35318

  • EPSS 0.4%
  • Veröffentlicht 16.06.2026 19:27:10
  • Zuletzt bearbeitet 16.06.2026 19:27:10

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with n...

9.8

CVE-2026-35296

  • EPSS 0.48%
  • Veröffentlicht 16.06.2026 19:27:03
  • Zuletzt bearbeitet 16.06.2026 19:27:03

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with ...

7.5

CVE-2026-35295

  • EPSS 0.31%
  • Veröffentlicht 16.06.2026 19:27:03
  • Zuletzt bearbeitet 16.06.2026 19:27:03

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with...

9.8

CVE-2026-35293

  • EPSS 0.48%
  • Veröffentlicht 16.06.2026 19:27:02
  • Zuletzt bearbeitet 16.06.2026 19:27:02

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access...

6.1

CVE-2024-20908

  • EPSS 0.33%
  • Veröffentlicht 16.01.2024 22:15:38
  • Zuletzt bearbeitet 21.11.2024 08:53:24

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

5.9

CVE-2021-45105

Warnung
  • EPSS 100%
  • Veröffentlicht 18.12.2021 12:15:07
  • Zuletzt bearbeitet 25.08.2026 16:28:27

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service wh...

5.4

CVE-2021-32808

  • EPSS 1.19%
  • Veröffentlicht 12.08.2021 17:15:08
  • Zuletzt bearbeitet 21.11.2024 06:07:47

ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse undo functionality using malform...

8.8

CVE-2021-29505

  • EPSS 77.23%
  • Veröffentlicht 28.05.2021 21:15:08
  • Zuletzt bearbeitet 07.10.2026 21:17:03

XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input str...