These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A low-severity vulnerability was found in Oracle VM VirtualBox 7.2.8, specifically in the VMSVGA device component. This issue allows high-privileged attackers with logon access to the infrastructure to compromise Oracle VM VirtualBox, potentially impacting additional products. Successful attacks can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. The vulnerability h [truncated]
A low-severity vulnerability was found in Oracle VM VirtualBox 7.2.8. This issue, located in the VMSVGA device component, allows high-privileged attackers with logon access to the infrastructure to compromise Oracle VM VirtualBox, potentially impacting additional products. Successful attacks can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. The vulnerability has a [truncated]
A critical vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0 of the Content Server component. It allows unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Content, potentially leading to a takeover of the system. The CVSS 3.1 Base Score is 9.8, indicating a high im [truncated]
A vulnerability was discovered in Oracle Access Manager, a product of Oracle Fusion Middleware, specifically in the Authentication Engine component. The affected versions are 12.2.1.4.0 and 14.1.2.1.0. This vulnerability is easily exploitable by an unauthenticated attacker with network access via HTTP, potentially compromising Oracle Access Manager. Successful attacks require human interaction from a pers [truncated]
A vulnerability was discovered in Oracle Fusion Middleware's Identity Manager product, specifically in the End User Self Service component. The affected versions are 12.2.1.4.0 and 14.1.2.1.0. This vulnerability is easily exploitable by an unauthenticated attacker with network access via IIOP, potentially leading to unauthorized update, insert, or delete access to some Identity Manager accessible data, as [truncated]
A critical vulnerability was discovered in Oracle WebCenter Sites, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46809, has a CVSS score of 9.1 and allows unauthenticated attackers with network access via HTTP to compromise the system. Successful attacks can result in unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to critic [truncated]
A vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The affected version is 14.1.2.0.0. This vulnerability allows an unauthenticated attacker with network access via HTTPS to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and can significantly impact additional products. The vulnerabilit [truncated]
A critical vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46805, has a CVSS score of 9.3 and allows unauthenticated attackers with network access via HTTP to compromise the system. Successful attacks require human interaction from a person other than the attacker and can result in unauthorized creation, deletion, or m [truncated]
A critical vulnerability was discovered in Oracle WebCenter Portal's Security Framework. This vulnerability, tracked as CVE-2026-46803, allows unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Portal. The vulnerability has a CVSS 3.1 Base Score of 10.0, indicating high impacts on Confidentiality, Integrity, and Availability. The affected versions are 12.2.1.4.0 and 14.1 [truncated]
A critical vulnerability was found in Oracle WebCenter Sites, a component of Oracle Fusion Middleware. The vulnerability has been assigned a CVSS score of 9.8, indicating a high severity level. It is easily exploitable by unauthenticated attackers with network access via HTTP, potentially leading to a complete takeover of the Oracle WebCenter Sites product. The vulnerability affects versions 12.2.1.4.0 an [truncated]
A critical vulnerability was discovered in Oracle WebCenter Sites, a product of Oracle Fusion Middleware. The vulnerability is easily exploitable, allowing unauthenticated attackers with network access via HTTP to compromise the system. Successful attacks can result in a takeover of Oracle WebCenter Sites. The CVSS 3.1 Base Score is 10.0, indicating high impacts on Confidentiality, Integrity, and Availabi [truncated]
A critical vulnerability was discovered in Oracle WebCenter Sites, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46799, affects versions 12.2.1.4.0 and 14.1.2.0.0. It allows unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Sites, potentially leading to a takeover of the site. The vulnerability has a high CVSS score of 9.8, indicating a h [truncated]
A critical vulnerability was discovered in Oracle WebCenter Sites, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46798, has a CVSS score of 10.0 and allows unauthenticated attackers with network access via HTTP to compromise the site. The vulnerability affects Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. Successful attacks can result in takeover of the site. T [truncated]
A critical vulnerability was discovered in Oracle WebCenter Sites, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46797, has a CVSS score of 9.8, indicating a high severity level. It affects versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Sites. The vulnerability allows unauthenticated attackers with network access via HTTP to compromise the site, potentially leading [truncated]
A high-severity vulnerability was found in Oracle WebCenter Sites, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46796, has a CVSS score of 8.0 and can be easily exploited by low-privileged attackers with network access via HTTP. Successful attacks require human interaction from a person other than the attacker and can result in the takeover of Oracle WebCenter Sites. The v [truncated]
A critical vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46795, affects version 14.1.2.0.0 of the software. It is an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person [truncated]
A critical vulnerability was discovered in Oracle Fusion Middleware's Identity Manager Connector, specifically in the Generic Unix Connector component. The vulnerability, tracked as CVE-2026-46792, has a CVSS score of 9.9 and can be easily exploited by a low-privileged attacker with network access via HTTP. This could potentially lead to a takeover of the Identity Manager Connector, which may significantl [truncated]
A high-severity vulnerability was found in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46791, affects version 14.1.2.0.0 of the software. It is easily exploitable by unauthenticated attackers with network access via HTTP, potentially leading to unauthorized access to critical data or complete access to all Oracle WebCenter Content accessible data [truncated]
A vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware, specifically in the Content Server component. The affected version is 14.1.2.0.0. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content, potentially leading to unauthorized read access to a subset of accessible data. The vulnerability has a [truncated]
A critical vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46789, affects version 14.1.2.0.0 of the software. It is easily exploitable by unauthenticated attackers with network access via HTTP, potentially leading to a takeover of Oracle WebCenter Content. The vulnerability requires human interaction from a person othe [truncated]
A high-severity vulnerability was found in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46788, has a CVSS score of 8.4 and can be easily exploited by high-privileged attackers with network access via HTTP. Successful attacks require human interaction from a person other than the attacker and can result in the takeover of Oracle WebCenter Content. [truncated]
CVE-2026-46787 is a difficult-to-exploit vulnerability in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability is in the Content Server component. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). The vulnerability a [truncated]
A critical vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46786, affects version 14.1.2.0.0 of the software. It is easily exploitable by unauthenticated attackers with network access via HTTP, potentially leading to a takeover of Oracle WebCenter Content. The vulnerability requires human interaction from a person othe [truncated]
A critical vulnerability was discovered in Oracle WebCenter Content, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46785, affects version 14.1.2.0.0 of the software. It is easily exploitable by unauthenticated attackers with network access via HTTP, potentially leading to unauthorized creation, deletion, or modification of critical data.
A critical vulnerability was discovered in Oracle WebCenter Content: Imaging, a product of Oracle Fusion Middleware. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to compromise WebCenter Content: Imaging, potentially leading to unauthorized creation, deletion, or modification of critical data. This vulnerability has a CVSS [truncated]
A critical vulnerability was discovered in Oracle WebCenter Content: Imaging, a product of Oracle Fusion Middleware. The vulnerability is easily exploitable and allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in a takeover of WebCenter Content: Imaging. The vulnerability is located in the Core component and affects versions 12.2.1.4.0 [truncated]
A critical vulnerability was discovered in Oracle WebCenter Enterprise Capture, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46782, has a CVSS 3.1 Base Score of 9.9, indicating a high impact on confidentiality, integrity, and availability. The vulnerability is in the Client Bundle component and affects versions 12.2.1.4.0 and 14.1.2.0.0 of the product.
A critical vulnerability was discovered in Oracle WebCenter Enterprise Capture, a product of Oracle Fusion Middleware, specifically in the Client Bundle component. This vulnerability, tracked as CVE-2026-46781, has a CVSS 3.1 Base Score of 10.0, indicating a high impact on confidentiality, integrity, and availability. The vulnerability affects supported versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerabilit [truncated]
A high-severity vulnerability was discovered in Oracle WebCenter Content: Imaging, a product of Oracle Fusion Middleware. The vulnerability, tracked as CVE-2026-46780, has a CVSS score of 8.8 and can be easily exploited by a low-privileged attacker with network access via HTTP, potentially leading to a takeover of the affected system. This vulnerability affects Oracle WebCenter Content: Imaging versions 1 [truncated]
A critical vulnerability was discovered in Oracle WebCenter Enterprise Capture, a product of Oracle Fusion Middleware. The vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0 and has a CVSS 3.1 Base Score of 9.9, indicating a high impact on confidentiality, integrity, and availability. The vulnerability is easily exploitable by a low-privileged attacker with network access via T3, potentially leading [truncated]
