# Oracle Webcenter Portal


- [CVE-2020-2555](https://insights.sbomify.com/CVE-2020-2555/): Oracle Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-39144](https://insights.sbomify.com/CVE-2021-39144/): XStream Remote Code Execution (high 8.5, exploited in the wild)
- [CVE-2026-46803](https://insights.sbomify.com/CVE-2026-46803/): Auth bypass in Oracle WebCenter Portal (critical 10.0)
- [CVE-2026-46846](https://insights.sbomify.com/CVE-2026-46846/): Auth bypass in Oracle WebCenter Portal (critical 10.0)
- [CVE-2018-14721](https://insights.sbomify.com/CVE-2018-14721/): Server-Side Request Forgery (SSRF) in jackson-databind (critical 10.0)
- [CVE-2026-73948](https://insights.sbomify.com/CVE-2026-73948/): Auth bypass in Oracle WebCenter Portal (critical 9.9)
- [CVE-2026-83031](https://insights.sbomify.com/CVE-2026-83031/): Auth bypass in Oracle WebCenter Sites (critical 9.9)
- [CVE-2026-83039](https://insights.sbomify.com/CVE-2026-83039/): Auth bypass in Oracle WebCenter Portal (critical 9.9)
- [CVE-2026-60730](https://insights.sbomify.com/CVE-2026-60730/): Auth bypass in Oracle WebCenter Portal (critical 9.9)
- [CVE-2026-60561](https://insights.sbomify.com/CVE-2026-60561/): Auth bypass in Oracle WebCenter Portal (critical 9.9)
- [CVE-2026-60562](https://insights.sbomify.com/CVE-2026-60562/): Auth bypass in Oracle WebCenter Portal (critical 9.9)
- [CVE-2026-60565](https://insights.sbomify.com/CVE-2026-60565/): Auth bypass in Oracle WebCenter Portal (critical 9.9)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/webcenter-portal/