[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVNLrktyOExS6oaTSRyGUHcXl7eK_PUolsb4cbUmbYsM":3,"g5a-family:oracle\u002Fwebcenter_portal":124,"g5a-ex:oracle\u002Fwebcenter_portal@*":125},{"success":4,"data":5},true,{"product":6,"versions":29,"topVulnerabilitiesByEpss":34,"kevVulnerabilities":92,"seoMetadata":102,"meta":121},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":28},"oracle","webcenter_portal",4,90,2,"2024-04-16",[14,19,22,25],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"11.1.1.9.0",24,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"12.2.1.2.0",3,{"version":23,"cve_count":24,"kev_count":11,"has_kev":4},"12.2.1.3.0",89,{"version":26,"cve_count":27,"kev_count":11,"has_kev":4},"12.2.1.4.0",71,"Webcenter Portal by Oracle is a technology product with 4 tracked versions and 90 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[30,31,32,33],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":24,"kev_count":11,"has_kev":4},{"version":26,"cve_count":27,"kev_count":11,"has_kev":4},[35,43,50,57,62,68,74,78,83,88],{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":18,"epssScore":42},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"v3.1","Medium",0.99999,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":40,"severity":48,"isKev":4,"epssScore":49},"CVE-2021-39144","XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose.","2021-08-23",8.5,"High",0.98124,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":40,"severity":55,"isKev":4,"epssScore":56},"CVE-2020-2555","Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2020-01-15",9.8,"Critical",0.97116,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":54,"cvssVersion":40,"severity":55,"isKev":18,"epssScore":61},"CVE-2019-10173","It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been initialized, it may allow a remote attacker to run arbitrary shell commands when unmarshalling XML or any supported format. e.g. JSON. (regression of CVE-2013-7285)","2019-07-23",0.95036,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":40,"severity":48,"isKev":18,"epssScore":67},"CVE-2019-0227","A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.","2019-05-01",7.5,0.9194,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":40,"severity":41,"isKev":18,"epssScore":73},"CVE-2021-21351","XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.","2021-03-23",5.4,0.82136,{"cveId":75,"description":76,"publishedDate":71,"cvssScore":66,"cvssVersion":40,"severity":48,"isKev":18,"epssScore":77},"CVE-2021-21341","XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.",0.77801,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":66,"cvssVersion":40,"severity":48,"isKev":18,"epssScore":82},"CVE-2021-29505","XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17.","2021-05-28",0.77232,{"cveId":84,"description":85,"publishedDate":71,"cvssScore":86,"cvssVersion":40,"severity":41,"isKev":18,"epssScore":87},"CVE-2021-21346","XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.",6.1,0.76367,{"cveId":89,"description":85,"publishedDate":71,"cvssScore":90,"cvssVersion":40,"severity":41,"isKev":18,"epssScore":91},"CVE-2021-21344",5.3,0.7598,[93,98],{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"severity":48,"isKev":4,"epssScore":49,"cisaVulnName":94,"cisaDateAdded":95,"cisaShortDescription":96,"cisaRequiredAction":97},"XStream Remote Code Execution Vulnerability","2023-03-10","XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affect multiple products, including but not limited to VMware Cloud Foundation.","Apply updates per vendor instructions.",{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"severity":55,"isKev":4,"epssScore":56,"cisaVulnName":99,"cisaDateAdded":100,"cisaShortDescription":101,"cisaRequiredAction":97},"Oracle Multiple Products Remote Code Execution Vulnerability","2021-11-03","Multiple Oracle products contain a remote code execution vulnerability that allows an unauthenticated attacker with network access via T3 or HTTP to takeover the affected system. Impacted Oracle products: Oracle Coherence in Fusion Middleware, Oracle Utilities Framework, Oracle Retail Assortment Planning, Oracle Commerce, Oracle Communications Diameter Signaling Router (DSR).",{"title":103,"metaDescription":104,"keywords":105,"structuredData":106},"Webcenter Portal by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Webcenter Portal by Oracle covering 4 versions with 90 tracked vulnerabilities including 1 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Webcenter Portal vulnerabilities, Webcenter Portal security, Webcenter Portal CVE, Oracle Webcenter Portal, Webcenter Portal threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Webcenter Portal KEV, Webcenter Portal exploited vulnerabilities",{"@context":107,"@type":108,"name":109,"description":104,"url":110,"manufacturer":111,"applicationCategory":115,"softwareVersion":116,"mainEntity":117},"https:\u002F\u002Fschema.org","SoftwareApplication","Webcenter Portal","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fwebcenter_portal",{"@type":112,"name":113,"url":114},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","4 versions tracked",{"@type":118,"name":119,"description":120,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Webcenter Portal Security Vulnerabilities","Security vulnerabilities affecting Webcenter Portal by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":122,"apiVersion":123},"2026-10-17T13:04:11.293Z","3.0",[],{"rows":126,"total":11,"capped":18,"failed":17},[127,131],{"cveId":44,"name":94,"severity":48,"cvss":47,"added":95,"epss":49,"published":128,"ranges":129,"checked":4,"hits":130,"covers":18},"2021-08-23T18:15:12.087",[23,26],[],{"cveId":51,"name":99,"severity":55,"cvss":54,"added":100,"epss":56,"published":132,"ranges":133,"checked":4,"hits":134,"covers":18},"2020-01-15T17:15:17.347",[23,26],[]]