Known Vulnerabilities for Webcenter Sites by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Webcenter Sites" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-32808 | ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboar... | 5.4 - MEDIUM | 2021-08-12 | 2023-11-07 |
| CVE-2021-29505 | XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 m... | 8.8 - HIGH | 2021-05-28 | 2023-11-07 |
| CVE-2021-27906 | A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox ve... | 5.5 - MEDIUM | 2021-03-19 | 2023-11-07 |
| CVE-2021-27807 | A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.... | 5.5 - MEDIUM | 2021-03-19 | 2023-11-07 |
| CVE-2021-26272 | It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like... | 6.5 - MEDIUM | 2021-01-26 | 2022-03-01 |
| CVE-2021-26271 | It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text int... | 6.5 - MEDIUM | 2021-01-26 | 2021-12-01 |
| CVE-2020-5258 | In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution ref... | 7.7 - HIGH | 2020-03-10 | 2023-11-07 |
| CVE-2020-2739 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported versi... | 7.4 - HIGH | 2020-04-15 | 2020-04-15 |
| CVE-2020-2539 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported versi... | 6.1 - MEDIUM | 2020-01-15 | 2022-07-28 |
| CVE-2020-2538 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported versi... | 7.1 - HIGH | 2020-01-15 | 2022-07-28 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Webcenter Sites | 7.6.2 | All | All | All |
| Application | Oracle | Webcenter Sites | 12.2.1.4.0 | All | All | All |
| Application | Oracle | Webcenter Sites | 12.2.1.3.0 | All | All | All |
| Application | Oracle | Webcenter Sites | 12.2.1.2.0 | All | All | All |
| Application | Oracle | Webcenter Sites | 12.2.1.1.0 | All | All | All |
| Application | Oracle | Webcenter Sites | 12.2.1.0.0 | All | All | All |
| Application | Oracle | Webcenter Sites | 12.2.1.0 | All | All | All |
| Application | Oracle | Webcenter Sites | 12.2.1 | All | All | All |
| Application | Oracle | Webcenter Sites | 11.1.1.8.0 | All | All | All |
| Application | Oracle | Webcenter Sites | 11.1.1.8 | All | All | All |