# Oracle WebCenter Portal vulnerabilities Source: https://junglewise.ai/threats/technologies/webcenter-portal Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/webcenter-portal.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 65 vulnerabilities in Oracle WebCenter Portal: 0 in the last 7 days and 48 in the last 90 days, 29 of them critical and 0 exploited in the wild. The most recent, CVE-2026-91248, was published on 20 October 2026. 4 vulnerabilities in the last four weeks, down 83% on the four before (24). 0 critical against 10. ## Counts - Last 7 days: 0 - Last 30 days: 4 - Last 90 days: 48 - All time: 65 (29 critical, 0 exploited in the wild) ## About Oracle WebCenter Portal A platform for building enterprise portals, composite applications, and self-service websites. ## Latest Oracle WebCenter Portal vulnerabilities - [CVE-2026-91248: Oracle WebCenter Portal information disclosure in Runtime Tools](https://junglewise.ai/threats/cve-2026-91248-vulnerability-in-the-oracle-webcenter-portal-product-of-oracle) (medium, CVSS 5.3, published 20 Oct 2026) - [CVE-2026-91247: Oracle WebCenter Portal authorization bypass in Runtime Tools](https://junglewise.ai/threats/cve-2026-91247-vulnerability-in-the-oracle-webcenter-portal-product-of-oracle) (medium, CVSS 5.9, published 20 Oct 2026) - [CVE-2026-91246: Oracle WebCenter Portal cross-site request forgery in Runtime Tools](https://junglewise.ai/threats/cve-2026-91246-vulnerability-in-the-oracle-webcenter-portal-product-of-oracle) (medium, CVSS 6.1, published 20 Oct 2026) - [CVE-2026-91245: Oracle WebCenter Portal information disclosure in Runtime Tools](https://junglewise.ai/threats/cve-2026-91245-vulnerability-in-the-oracle-webcenter-portal-product-of-oracle) (medium, CVSS 6.5, published 20 Oct 2026) - [CVE-2026-83065: Oracle WebCenter Portal compromise via adjacent network access](https://junglewise.ai/threats/cve-2026-83065-oracle-webcenter-portal-compromise-via-adjacent-network-access) (high, CVSS 7.5, published 15 Sep 2026) - [CVE-2026-83064: Oracle WebCenter Portal privilege escalation in Runtime Tools](https://junglewise.ai/threats/cve-2026-83064-oracle-webcenter-portal-privilege-escalation-in-runtime-tools) (critical, CVSS 9.1, published 15 Sep 2026) - [CVE-2026-83053: Oracle WebCenter Portal privilege escalation in Runtime Tools](https://junglewise.ai/threats/cve-2026-83053-oracle-webcenter-portal-privilege-escalation-in-runtime-tools) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-83052: Oracle WebCenter Portal privilege escalation in Runtime Tools](https://junglewise.ai/threats/cve-2026-83052-oracle-webcenter-portal-privilege-escalation-in-runtime-tools) (high, CVSS 7.6, published 15 Sep 2026) - [CVE-2026-83051: Oracle WebCenter Portal unauthorized data access in Runtime Tools](https://junglewise.ai/threats/cve-2026-83051-oracle-webcenter-portal-unauthorized-data-access-in-runtime-tools) (high, CVSS 7.5, published 15 Sep 2026) - [CVE-2026-83050: Oracle WebCenter Portal authentication bypass in Runtime Tools](https://junglewise.ai/threats/cve-2026-83050-oracle-webcenter-portal-authentication-bypass-in-runtime-tools) (high, CVSS 7.1, published 15 Sep 2026) - [CVE-2026-83049: Oracle WebCenter Portal authentication bypass in Security Framework](https://junglewise.ai/threats/cve-2026-83049-oracle-webcenter-portal-authentication-bypass-in-security) (high, CVSS 8.5, published 15 Sep 2026) - [CVE-2026-83048: Oracle WebCenter Portal privilege escalation in Runtime Tools](https://junglewise.ai/threats/cve-2026-83048-oracle-webcenter-portal-privilege-escalation-in-runtime-tools) (high, CVSS 7.7, published 15 Sep 2026) - [CVE-2026-83047: Oracle WebCenter Portal authentication bypass via HTTP](https://junglewise.ai/threats/cve-2026-83047-oracle-webcenter-portal-authentication-bypass-via-http) (high, CVSS 8.2, published 15 Sep 2026) - [CVE-2026-83046: Oracle WebCenter Portal privilege escalation in Runtime Tools](https://junglewise.ai/threats/cve-2026-83046-oracle-webcenter-portal-privilege-escalation-in-runtime-tools) (high, CVSS 7.1, published 15 Sep 2026) - [CVE-2026-83045: Oracle WebCenter Portal privilege escalation in Runtime Tools](https://junglewise.ai/threats/cve-2026-83045-oracle-webcenter-portal-privilege-escalation-in-runtime-tools) (high, CVSS 8.5, published 15 Sep 2026) - [CVE-2026-83043: Oracle WebCenter Portal remote code execution in Composer](https://junglewise.ai/threats/cve-2026-83043-oracle-webcenter-portal-remote-code-execution-in-composer) (critical, CVSS 9.6, published 15 Sep 2026) - [CVE-2026-83041: Oracle WebCenter Portal unauthorized data access in Portlet Services](https://junglewise.ai/threats/cve-2026-83041-oracle-webcenter-portal-unauthorized-data-access-in-portlet) (high, CVSS 7.7, published 15 Sep 2026) - [CVE-2026-83040: Oracle WebCenter Portal RCE in Portlet Services via SOAP](https://junglewise.ai/threats/cve-2026-83040-oracle-webcenter-portal-rce-in-portlet-services-via-soap) (critical, CVSS 9.6, published 15 Sep 2026) - [CVE-2026-83039: Oracle WebCenter Portal privilege escalation in Composer](https://junglewise.ai/threats/cve-2026-83039-oracle-webcenter-portal-privilege-escalation-in-composer) (critical, CVSS 9.9, published 15 Sep 2026) - [CVE-2026-73963: Oracle WebCenter Portal remote code execution in Portlet Services](https://junglewise.ai/threats/cve-2026-73963-oracle-webcenter-portal-remote-code-execution-in-portlet-services) (critical, CVSS 9.8, published 15 Sep 2026) - [CVE-2026-73959: Oracle WebCenter Portal privilege escalation in Composer](https://junglewise.ai/threats/cve-2026-73959-oracle-webcenter-portal-privilege-escalation-in-composer) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-73957: Oracle WebCenter Portal XSS or authentication bypass in Portlet Services](https://junglewise.ai/threats/cve-2026-73957-oracle-webcenter-portal-xss-or-authentication-bypass-in-portlet) (critical, CVSS 9.3, published 15 Sep 2026) - [CVE-2026-73956: Oracle WebCenter Portal remote code execution in Composer](https://junglewise.ai/threats/cve-2026-73956-oracle-webcenter-portal-remote-code-execution-in-composer) (critical, CVSS 9.8, published 15 Sep 2026) - [CVE-2026-73953: Oracle WebCenter Portal remote code execution in Portlet Services](https://junglewise.ai/threats/cve-2026-73953-oracle-webcenter-portal-remote-code-execution-in-portlet-services) (critical, CVSS 9.8, published 15 Sep 2026) - [CVE-2026-73952: Oracle WebCenter Portal unauthenticated access vulnerability in Portlet Services](https://junglewise.ai/threats/cve-2026-73952-oracle-webcenter-portal-unauthenticated-access-vulnerability-in) (critical, CVSS 9.1, published 15 Sep 2026) ## Most severe Oracle WebCenter Portal vulnerabilities - [CVE-2026-46846: Oracle WebCenter Portal authentication bypass in Security Framework](https://junglewise.ai/threats/cve-2026-46846-oracle-webcenter-portal-authentication-bypass-in-security) (critical, CVSS 10, published 17 Jun 2026) - [CVE-2026-46803: Oracle WebCenter Portal auth bypass in Security Framework](https://junglewise.ai/threats/cve-2026-46803-oracle-webcenter-portal-auth-bypass-in-security-framework) (critical, CVSS 10, published 17 Jun 2026) - [CVE-2026-46847: Oracle WebCenter Portal compromise in Runtime Tools](https://junglewise.ai/threats/cve-2026-46847-oracle-webcenter-portal-compromise-in-runtime-tools) (critical, CVSS 9.9, published 17 Jun 2026) - [CVE-2026-46844: Oracle WebCenter Portal improper access control in Security Framework](https://junglewise.ai/threats/cve-2026-46844-oracle-webcenter-portal-improper-access-control-in-security) (critical, CVSS 9.9, published 17 Jun 2026) - [CVE-2026-46838: Oracle WebCenter Portal improper access control in Security Framework](https://junglewise.ai/threats/cve-2026-46838-oracle-webcenter-portal-improper-access-control-in-security) (critical, CVSS 9.9, published 17 Jun 2026) - [CVE-2026-46814: Oracle WebCenter Portal improper access control in Security Framework](https://junglewise.ai/threats/cve-2026-46814-oracle-webcenter-portal-improper-access-control-in-security) (critical, CVSS 9.9, published 17 Jun 2026) - [CVE-2026-46802: Oracle WebCenter Portal improper access control in Security Framework](https://junglewise.ai/threats/cve-2026-46802-oracle-webcenter-portal-improper-access-control-in-security) (critical, CVSS 9.9, published 17 Jun 2026) - [CVE-2026-46767: Oracle WebCenter Portal improper access control in Composer](https://junglewise.ai/threats/cve-2026-46767-oracle-webcenter-portal-improper-access-control-in-composer) (critical, CVSS 9.9, published 17 Jun 2026) - [CVE-2026-46765: Oracle WebCenter Portal improper access control in Composer](https://junglewise.ai/threats/cve-2026-46765-oracle-webcenter-portal-improper-access-control-in-composer) (critical, CVSS 9.9, published 17 Jun 2026) - [CVE-2026-83039: Oracle WebCenter Portal privilege escalation in Composer](https://junglewise.ai/threats/cve-2026-83039-oracle-webcenter-portal-privilege-escalation-in-composer) (critical, CVSS 9.9, published 15 Sep 2026) ## Vulnerabilities per week 4 vulnerabilities in the last four weeks, down 83% on the four before (24). 0 critical against 10. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 20 | 3 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 24 | 10 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 4 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Oracle technologies - [Oracle MySQL Server](https://junglewise.ai/threats/technologies/mysql-server): 163 vulnerabilities - [Oracle Hyperion Financial Management](https://junglewise.ai/threats/technologies/hyperion-financial-management): 142 vulnerabilities - [Oracle Helidon](https://junglewise.ai/threats/technologies/helidon): 130 vulnerabilities - [Oracle MySQL Cluster](https://junglewise.ai/threats/technologies/mysql-cluster): 129 vulnerabilities - [Oracle Coherence](https://junglewise.ai/threats/technologies/coherence): 113 vulnerabilities - [Oracle E-Business Suite](https://junglewise.ai/threats/technologies/e-business-suite): 110 vulnerabilities - [Oracle WebCenter Content](https://junglewise.ai/threats/technologies/webcenter-content): 110 vulnerabilities - [Oracle Commerce Guided Search](https://junglewise.ai/threats/technologies/commerce-guided-search): 104 vulnerabilities - [Oracle Commerce Experience Manager](https://junglewise.ai/threats/technologies/commerce-experience-manager): 102 vulnerabilities - [Oracle JD Edwards EnterpriseOne Tools](https://junglewise.ai/threats/technologies/jd-edwards-enterpriseone-tools): 101 vulnerabilities - [Oracle PeopleSoft Enterprise PeopleTools](https://junglewise.ai/threats/technologies/peopletools): 101 vulnerabilities - [Oracle Java SE](https://junglewise.ai/threats/technologies/java-se): 92 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Oracle WebCenter Portal vulnerabilities", https://junglewise.ai/threats/technologies/webcenter-portal, 9 November 2026.