CVE-2026-35327
HighCVSS 7.6Exploitation Probability (EPSS)
Low risk18th percentile — higher than 18% of all known CVEs
Summary
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTPS to compromise the system. Successful attacks require human interaction, potentially leading to unauthorized access to critical data.
Risk Assessment
Attacks may result in unauthorized access to data and the ability to update, insert, or delete data. This can significantly impact the organization's security and data integrity.
Recommendation
It is recommended to update to the latest version of Oracle WebCenter Content and implement additional security measures to minimize the risk of attack.
Original NVD description (English source)
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Content accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Content accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N).