CVE-2026-60564

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0

Description An issue exists in the Runtime Tools component of Oracle WebCenter Portal. A low privileged attacker with network access via HTTP can compromise the system, potentially impacting additional products due to a scope change. Successful exploitation allows unauthorized access to critical data, as well as the unauthorized creation, deletion, or modification of all data accessible through Oracle WebCenter Portal.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.