Oracle WebCenter Sites Critical Unauthenticated Takeover Flaw

A critical vulnerability has been found in Oracle WebCenter Sites, part of Oracle Fusion Middleware. The flaw is an unauthenticated remote takeover vulnerability reachable over HTTP.

Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An attacker with network access can exploit it without any credentials, potentially taking over the WebCenter Sites instance.

• CVSS 3.1 Base Score: 9.8
• Impact: High confidentiality, integrity, and availability
• Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H