## Summary
Oracle WebCenter Portal (Oracle Fusion Middleware, component: Runtime Tools) contains a vulnerability affecting version 14.1.2.0.0. The issue is described as difficult to exploit and can be triggered by an unauthenticated attacker who has access to the physical communication segment attached to the hardware running Oracle WebCenter Portal.
Successful exploitation may lead to takeover of the Oracle WebCenter Portal instance, impacting confidentiality, integrity, and availability.
## Technical Details
- Affected component: Runtime Tools within Oracle WebCenter Portal (Oracle Fusion Middleware).
- Attack prerequisites (per NVD): unauthenticated access plus access to the physical communication segment attached to the target hardware.
- Exploit complexity: difficult to exploit (AC:H).
- CVSS 3.1: 7.5 with vector CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
## Affected
- Oracle WebCenter Portal (Oracle Fusion Middleware) 14.1.2.0.0.
## Impact
- Takeover of Oracle WebCenter Portal.
- High-impact outcomes across CIA:
- Confidentiality impact: C:H
- Integrity impact: I:H
- Availability impact: A:H
## Mitigation
1. Restrict and monitor access to the physical communication segment connected to the hardware hosting Oracle WebCenter Portal.
2. Apply Oracle’s recommended security updates/patches for Oracle WebCenter Portal 14.1.2.0.0 (exact fixed versions not provided in the available material).
3. Implement compensating controls to reduce exposure to adjacent/physical network paths (e.g., segmentation, access controls, and auditing around the runtime host).
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H