Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Oracle
Webcenter Portal

oracle webcenter portal Vulnerabilities: CVEs, CISA KEV & Security Advisories

90 CVEs

2 in CISA KEV

oracle webcenter portal Vulnerabilities

CVE security advisories and vulnerability history for webcenter portal by oracle.

90

Total CVEs

Published

2

In CISA KEV

Exploited in the wild

4

Public exploits

With known exploit

7.5

Avg CVSS

2017–2024

Last updated April 16, 2024

Overview

oracle webcenter portal has 90 published CVE records since 2017, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting oracle webcenter portal, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of oracle webcenter portal's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High26

Medium15

Low0

47 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

2

2 of oracle webcenter portal's CVEs are confirmed exploited in the wild.

Public exploits

4

4 of oracle webcenter portal's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every oracle webcenter portal version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for oracle webcenter portal; the CVEs below apply to the product without a version pin.

90 CVEs

Sort

Medium vulnerability · 2024-04-16
CVE-2024-20992CWE-284
Medium · CVSS 4.4
EPSS 0.2% (42th pct)2024-04-16
Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
CVE-2021-45105
Patch
Workaround
CWE-20
Medium · CVSS 5.9
EPSS 74.0% (99th pct)2021-12-18
High vulnerability · 2021-11-17
CVE-2021-41165
Patch
CWE-79
High · CVSS 8.2
EPSS 0.1% (28th pct)2021-11-17
High vulnerability · 2021-11-17
CVE-2021-41164
Patch
CWE-79
High · CVSS 8.2
EPSS 0.1% (23th pct)2021-11-17
Vulnerability · 2021-10-19
CVE-2021-37137
Patch
CWE-400
Unscored
EPSS 2.4% (85th pct)2021-10-19
Vulnerability · 2021-10-19
CVE-2021-37136
Patch
CWE-400
Unscored
EPSS 1.2% (79th pct)2021-10-19
High vulnerability · 2021-08-23
CVE-2021-39150
Patch
CWE-502
High · CVSS 8.5
EPSS 2.1% (85th pct)2021-08-23
High vulnerability · 2021-08-23
CVE-2021-39152
Patch
CWE-502
High · CVSS 8.5
EPSS 61.8% (98th pct)2021-08-23
Medium vulnerability · 2021-08-23
CVE-2021-39140
Patch
CWE-502
Medium · CVSS 6.5
EPSS 0.1% (34th pct)2021-08-23
XStream is vulnerable to an Arbitrary Code Execution attack
CVE-2021-39149
Patch
CWE-502
High · CVSS 8.5
EPSS 0.6% (71th pct)2021-08-23
XStream is vulnerable to an Arbitrary Code Execution attack
CVE-2021-39148
Patch
CWE-502
High · CVSS 8.5
EPSS 0.7% (73th pct)2021-08-23
XStream is vulnerable to an Arbitrary Code Execution attack
CVE-2021-39147
Patch
CWE-502
High · CVSS 8.5
EPSS 0.7% (73th pct)2021-08-23
XStream is vulnerable to an Arbitrary Code Execution attack
CVE-2021-39146
Patch
CWE-502
High · CVSS 8.5
EPSS 50.4% (98th pct)2021-08-23
XStream is vulnerable to an Arbitrary Code Execution attack
CVE-2021-39145
Patch
CWE-502
High · CVSS 8.5
EPSS 0.5% (68th pct)2021-08-23
XStream is vulnerable to an Arbitrary Code Execution attack
CVE-2021-39141
Patch
CWE-502
High · CVSS 8.5
EPSS 83.1% (99th pct)2021-08-23
XStream is vulnerable to an Arbitrary Code Execution attack
CVE-2021-39153
Patch
CWE-502
High · CVSS 8.5
EPSS 0.6% (71th pct)2021-08-23
XStream is vulnerable to an Arbitrary Code Execution attack
CVE-2021-39151
Patch
CWE-502
High · CVSS 8.5
EPSS 0.6% (71th pct)2021-08-23
High vulnerability · 2021-08-23
CVE-2021-39139
Patch
CWE-502
High · CVSS 8.5
EPSS 0.7% (73th pct)2021-08-23
XStream is vulnerable to an Arbitrary Code Execution attack
CVE-2021-39154
Patch
CWE-502
High · CVSS 8.5
EPSS 0.7% (73th pct)2021-08-23
XStream is vulnerable to a Remote Command Execution attack
CVE-2021-39144
CISA KEV
Public exploit
Patch
CWE-502
Added to CISA KEV 2023-03-10
Critical · CVSS 10.0
EPSS 94.3% (100th pct)2021-08-23
High vulnerability · 2021-08-18
CVE-2021-37714
Patch
CWE-248
High · CVSS 7.5
EPSS 4.4% (89th pct)2021-08-18
Vulnerability · 2021-07-13
CVE-2021-36090
Patch
Workaround
CWE-130
Unscored
EPSS 0.7% (73th pct)2021-07-13
Vulnerability · 2021-07-13
CVE-2021-35517
Patch
Workaround
CWE-130
Unscored
EPSS 1.3% (80th pct)2021-07-13
Vulnerability · 2021-07-13
CVE-2021-35516
Patch
Workaround
CWE-130
Unscored
EPSS 1.7% (83th pct)2021-07-13
XStream is vulnerable to a Remote Command Execution attack
CVE-2021-29505
Patch
CWE-502
High · CVSS 7.5
EPSS 90.3% (100th pct)2021-05-28
Possible limited path traversal vulnerabily in Apache Commons IO
CVE-2021-29425
Patch
Workaround
CWE-20
Unscored
EPSS 0.5% (66th pct)2021-04-13
Vulnerability · 2021-03-31
CVE-2021-28657
Patch
Workaround
CWE-835
Unscored
EPSS 0.2% (45th pct)2021-03-31
XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)
CVE-2021-21348
Patch
CWE-502
Medium · CVSS 5.3
EPSS 0.3% (49th pct)2021-03-22
Medium vulnerability · 2021-03-22
CVE-2021-21349
Patch
CWE-502
Medium · CVSS 6.1
EPSS 6.7% (91th pct)2021-03-22
Medium vulnerability · 2021-03-22
CVE-2021-21350
Patch
CWE-502
Medium · CVSS 5.3
EPSS 8.8% (93th pct)2021-03-22

Showing 30 of 90

Common weakness types

The CWE weakness categories most often found in oracle webcenter portal CVEs. Follow any weakness for its full explanation.

CWE-502Deserialization of Untrusted Data30 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type2 CVEs
CWE-184Incomplete List of Disallowed Inputs2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-284Improper Access Control1 CVE

Disclosure activity by year

How many oracle webcenter portal CVEs were published each year.

2017

1

2018

9

2019

17

2020

14

2021

48

2024

1

Other oracle products

Browse vulnerabilities for other products by oracle.

mysql1,329 CVEs jre800 CVEs jdk792 CVEs solaris755 CVEs database server518 CVEs vm virtualbox417 CVEs peoplesoft enterprise peopletools354 CVEs e-business suite332 CVEs

All oracle vulnerabilities

Frequently asked questions

Common questions about oracle webcenter portal vulnerabilities.

How many CVEs does oracle webcenter portal have?

oracle webcenter portal has 90 published CVE records since 2017.

How many oracle webcenter portal CVEs are in CISA KEV?

Yes — 2 of oracle webcenter portal's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for oracle webcenter portal vulnerabilities?

Yes — 4 of oracle webcenter portal's CVEs have a known public exploit.

What are the most common weakness types in oracle webcenter portal CVEs?

oracle webcenter portal's CVEs most often map to these CWE weakness types: CWE-502 (Deserialization of Untrusted Data), CWE-400 (Uncontrolled Resource Consumption), CWE-130 (Improper Handling of Length Parameter Inconsistency), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

How many critical oracle webcenter portal vulnerabilities are there?

oracle webcenter portal has 2 critical and 26 high-severity CVEs.

What is the average severity of oracle webcenter portal CVEs?

The average CVSS base score across oracle webcenter portal's scored CVEs is 7.5.

References

All oracle vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track oracle webcenter portal vulnerabilities

Monitor new oracle webcenter portal vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References