Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle WebCenter Portal executes to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cspusep2026.html |
Configurations
No configuration.
History
17 Sep 2026, 16:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 |
Information
Published : 2026-09-15 20:18
Updated : 2026-09-17 16:17
NVD link : CVE-2026-83065
Mitre link : CVE-2026-83065
CVE.ORG link : CVE-2026-83065
JSON object : View
Products Affected
No product.
CWE
CWE-284
Improper Access Control
