The 12.2.1.4.0 and 14.1.2.0.0 versions of WebCenter Sites installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory.

  - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Core (Apache     Log4j)). The supported version that is affected is 12.2.1.4.0. Difficult to exploit vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of Oracle WebCenter Sites. (CVE-2021-45105)

  - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Core (Spring     Security)). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful     attacks of this vulnerability can result in unauthorized access to critical data or complete access to all     Oracle WebCenter Sites accessible data. (CVE-2025-41248)

  - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Core (Apache     Commons Lang)). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter     Sites. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial     denial of service (partial DOS) of Oracle WebCenter Sites. (CVE-2025-48924)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle WebCenter Sites (January 2026 CPU)

medium Nessus Plugin ID 294976

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Feb 4, 2026, 2:23 PM Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202602041423
Version 1.2 Jan 26, 2026, 9:17 PM New Plugin Feed: 202601262117
Version 1.1 Jan 22, 2026, 9:53 PM New Plugin Feed: 202601222153