CVE-2026-60465
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Vulnerability in WebCenter Content: Imaging (Core component) allows a low-privileged attacker to take over the system over the network via T3 and IIOP protocols. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.
Risk Assessment
A successful attack can lead to full takeover of WebCenter Content: Imaging, risking data confidentiality, integrity, and availability.
Recommendation
Apply the Oracle patch for versions 12.2.1.4.0 and 14.1.2.0.0 immediately. Restrict T3 and IIOP access to trusted networks.
Other vulnerabilities in WebCenter Content: Imaging
See all- CVE-2026-46784Critical
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system. The attacker can gain unauthorized access to critical data and has the ability to create, delete, or modify data.
- CVE-2026-46783Critical
Vulnerability in the WebCenter Content: Imaging product of Oracle, affecting versions 12.2.1.4.0 and 14.1.2.0.0. It allows easy exploitation by an unauthenticated attacker with network access via HTTP, potentially leading to takeover of WebCenter Content: Imaging.
- CVE-2026-60503High
Vulnerability in WebCenter Content: Imaging (Core component) allows a low-privileged attacker to take over the system over the network via HTTP. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.
- CVE-2026-60472High
Vulnerability in Oracle Fusion Middleware's WebCenter Content: Imaging product (component: Core). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging.
- CVE-2026-60470High
Vulnerability in WebCenter Content: Imaging (component: Core) in Oracle Fusion Middleware. A low-privileged attacker via HTTP, with user interaction, can gain unauthorized access to critical data and the ability to create, delete, or modify it, affecting other products.
- CVE-2026-60469High
Vulnerability in WebCenter Content: Imaging (Fusion Middleware). Low-privileged attacker via HTTP can compromise data confidentiality and integrity, requiring user interaction, affecting other products.
- CVE-2026-60468High
Vulnerability in WebCenter Content: Imaging (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain full access to critical data and modify some data.
- CVE-2026-60464High
Vulnerability in Oracle Fusion Middleware's WebCenter Content: Imaging product (component: Core). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging.
- CVE-2026-60452High
Vulnerability in WebCenter Content: Imaging (component: Core) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can access critical data and modify it, also impacting other products.
- CVE-2026-60451High
Vulnerability in WebCenter Content: Imaging (component: Core) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can access critical data and modify it.
Original NVD description (English source)
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in takeover of WebCenter Content: Imaging. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).