# Oracle Webcenter Sites


- [CVE-2017-12617](https://insights.sbomify.com/CVE-2017-12617/): Apache Tomcat Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2020-11023](https://insights.sbomify.com/CVE-2020-11023/): JQuery Cross-Site Scripting (XSS) (medium 6.9, exploited in the wild)
- [CVE-2026-46798](https://insights.sbomify.com/CVE-2026-46798/): Auth bypass in Oracle WebCenter Sites (critical 10.0)
- [CVE-2026-46800](https://insights.sbomify.com/CVE-2026-46800/): Auth bypass in Oracle WebCenter Sites (critical 10.0)
- [CVE-2013-4316](https://insights.sbomify.com/CVE-2013-4316/): Code injection in Apache Struts (critical 10.0)
- [CVE-2026-61021](https://insights.sbomify.com/CVE-2026-61021/): Auth bypass in Oracle WebCenter Sites (critical 9.9)
- [CVE-2026-60552](https://insights.sbomify.com/CVE-2026-60552/): Auth bypass in Oracle WebCenter Sites (critical 9.9)
- [CVE-2026-61018](https://insights.sbomify.com/CVE-2026-61018/): Auth bypass in Oracle WebCenter Sites (critical 9.8)
- [CVE-2026-60551](https://insights.sbomify.com/CVE-2026-60551/): Auth bypass in Oracle WebCenter Sites (critical 9.8)
- [CVE-2026-60555](https://insights.sbomify.com/CVE-2026-60555/): Auth bypass in Oracle WebCenter Sites (critical 9.8)
- [CVE-2026-61140](https://insights.sbomify.com/CVE-2026-61140/): Auth bypass in Oracle WebCenter Sites (critical 9.8)
- [CVE-2026-35293](https://insights.sbomify.com/CVE-2026-35293/): Auth bypass in Oracle WebCenter Sites (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/webcenter-sites/