CVE-2026-60565 in WebCenter Portal
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Portal. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability resides within Oracle WebCenter Portal's Runtime Tools component of the Fusion Middleware suite, specifically affecting versions 12.2.1.4.0 and 14.1.2.0.0. The flaw represents a critical security weakness that can be exploited by low-privileged attackers with network access through HTTP protocols. The CVSS score of 9.9 indicates a severe impact across confidentiality, integrity, and availability domains, reflecting the potential for complete system compromise. The vulnerability's classification as easily exploitable means that attackers require minimal skill or resources to leverage this weakness effectively.
The technical nature of this vulnerability stems from inadequate access controls within the Runtime Tools component, allowing authenticated users with limited privileges to escalate their access and potentially gain full control over the WebCenter Portal environment. This represents a privilege escalation flaw that can be particularly dangerous in enterprise environments where portal systems serve as central hubs for business-critical applications and data access. The attack vector requires only network connectivity via HTTP, making it accessible to attackers who may not possess deep technical expertise or insider knowledge.
The operational impact extends beyond the immediate WebCenter Portal system due to the scope change aspect of this vulnerability. Successful exploitation can lead to unauthorized access that may compromise additional Oracle products within the same ecosystem, creating cascading security risks across interconnected systems. This interconnectedness means that a single point of compromise can potentially affect multiple applications and services that rely on the same middleware infrastructure. Organizations may experience data breaches, system downtime, and potential regulatory compliance violations if this vulnerability is exploited effectively.
Security professionals should implement immediate mitigations including network segmentation to limit access to WebCenter Portal components, strengthening authentication mechanisms, and applying available patches from Oracle. The vulnerability aligns with CWE-284 (Improper Access Control) and may map to ATT&CK techniques involving privilege escalation and lateral movement within the network environment. Organizations should also conduct thorough security assessments of their middleware infrastructure to identify other potential entry points that could be exploited through similar vectors, particularly given the interconnected nature of Oracle Fusion Middleware products. Regular monitoring for unauthorized access attempts and implementing robust logging mechanisms will help detect exploitation attempts before they can cause significant damage to enterprise systems.