CVE Catalog

CVE-2026-60464

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.30%

22th percentile - higher than 22% of all known CVEs

Summary

Vulnerability in Oracle Fusion Middleware's WebCenter Content: Imaging product (component: Core). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging.

Risk Assessment

Successful attack can lead to full takeover of the WebCenter Content: Imaging system, resulting in loss of confidentiality, integrity, and availability of data.

Recommendation

Apply the security patch provided by Oracle for versions 12.2.1.4.0 and 14.1.2.0.0. Restrict network access to the HTTP interface to trusted users only.

Other vulnerabilities in WebCenter Content: Imaging

See all
Original NVD description (English source)

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in takeover of WebCenter Content: Imaging. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS