CVE-2026-60565 Oracle Corporation CVE debrief

Who should care

Organizations using Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 should prioritize patching this vulnerability. The exploitability and potential impact of this vulnerability make it a high priority for security teams to address.

Technical summary

The vulnerability, CVE-2026-60565, is located in the Runtime Tools component of Oracle WebCenter Portal, affecting versions 12.2.1.4.0 and 14.1.2.0.0. It allows an attacker with low privileges and network access via HTTP to compromise the system. Successful exploitation can lead to a complete takeover of Oracle WebCenter Portal. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating a critical severity. Organizations should verify their deployments and prioritize patching. The vulnerability has a CVSS score of 9.9, impacting confidentiality, integrity, and availability.

Defensive priority

High

Recommended defensive actions

• Apply the latest security patches from Oracle for WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0.
• Implement compensating controls such as network segmentation and access controls to limit exposure.
• Monitor for suspicious activity and implement logging and monitoring to detect potential exploitation attempts.
• Conduct a thorough inventory of WebCenter Portal instances to ensure all affected versions are identified and patched.
• Review and verify the integrity of WebCenter Portal systems.
• Implement additional security measures such as multi-factor authentication and role-based access control.
• Track and analyze system logs for potential security incidents.

Evidence notes

The CVE record was published on 2026-07-21T22:17:56.697Z and was last modified on 2026-07-27T16:18:05.853Z. The NVD entry is currently Modified. The vulnerability has a CVSS score of 9.9 and is considered critical.

Official resources