CVE-2026-61208

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal versions 12.2.1.4.0 Oracle WebCenter Portal versions 14.1.2.0.0

Description An issue in the Runtime Tools component allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to critical data, the ability to update, insert, or delete accessible data, and the potential to cause a partial denial of service (DOS), which is a condition where the system becomes partially unavailable to users.

Recommendations Update Oracle WebCenter Portal version 12.2.1.4.0 to a patched version. Update Oracle WebCenter Portal version 14.1.2.0.0 to a patched version.