CVE-2026-61124

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal versions 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0

Description An issue in the Runtime Tools component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation requires human interaction and can lead to the unauthorized creation, deletion, or modification of critical data and all accessible data within the portal. Additionally, this may result in a partial denial of service (partial DOS), which is a condition where the system becomes partially unavailable or unresponsive to some users.

Recommendations Update Oracle WebCenter Portal version 12.2.1.4.0 to the latest patched version. Update Oracle WebCenter Portal version 14.1.2.0.0 to the latest patched version.