webcenter portal vulnerabilities and fixes

Recent CVEs affecting webcenter portal, with upgrade or downgrade steps. 27 tracked.

Also searched as: webcenterportal.

webcenter portal has 27 tracked vulnerabilities, 9 critical. A fixed release or vendor patch exists for 27. Most recent: 2026-08-18. Highest priority: CVE-2026-60566 (score 53/100).

• CVE-2026-60566 CRITICAL 9.8 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-60561 CRITICAL 9.9 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-60562 CRITICAL 9.9 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-60565 CRITICAL 9.9 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-60568 CRITICAL 9.9 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-60564 CRITICAL 9.6 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-60563 HIGH 8.8 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-60728 CRITICAL 9.1 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services)
• CVE-2026-60730 CRITICAL 9.9 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)
• CVE-2026-60729 HIGH 8.8 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)
• CVE-2026-60731 HIGH 8.8 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)
• CVE-2026-60733 HIGH 7.7 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer)
• CVE-2026-61228 HIGH 8.6 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-61230 HIGH 8.6 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-61193 HIGH 8.7 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-61229 HIGH 8.1 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-61213 HIGH 8.8 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-61215 HIGH 8.7 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-61219 HIGH 8.7 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-61177 HIGH 8.1 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-61212 HIGH 8.5 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-61222 HIGH 8.2 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-61199 HIGH 7.7 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-61208 HIGH 7.6 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-61124 HIGH 7.1 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-61227 HIGH 7.6 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)
• CVE-2026-70970 CRITICAL 9.8 DOWNGRADE Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools)

FAQ

How do I fix webcenter portal vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is webcenter portal being exploited right now?

None of the tracked webcenter portal CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which webcenter portal CVE should I patch first?

CVE-2026-60566 currently ranks highest (53/100): Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

← Back to latest CVEs