PT-2026-49931 · Oracle · Webcenter Sites

CVE-2026-46798

·

Published

2026-06-16

·

Updated

2026-06-19

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites version 12.2.1.4.0 Oracle WebCenter Sites version 14.1.2.0.0
Description An issue in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can result in a full takeover of Oracle WebCenter Sites and may significantly impact additional products due to a scope change.
Recommendations Update Oracle WebCenter Sites version 12.2.1.4.0 by applying the June 2026 CPU. Update Oracle WebCenter Sites version 14.1.2.0.0 by applying the June 2026 CPU.

Fix

Missing Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2026-08629
CVE-2026-46798

Affected Products

Webcenter Sites