CVE-2026-60470
HighCVSS 8.7Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
Vulnerability in WebCenter Content: Imaging (component: Core) in Oracle Fusion Middleware. A low-privileged attacker via HTTP, with user interaction, can gain unauthorized access to critical data and the ability to create, delete, or modify it, affecting other products.
Risk Assessment
Risk includes compromise of confidentiality and integrity of imaging data, potentially leading to leakage or manipulation of documentation, with possible impact on other systems.
Recommendation
Apply Oracle patches for versions 12.2.1.4.0 and 14.1.2.0.0 and educate users.
Other vulnerabilities in WebCenter Content: Imaging
See all- CVE-2026-46784Critical
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system. The attacker can gain unauthorized access to critical data and has the ability to create, delete, or modify data.
- CVE-2026-46783Critical
Vulnerability in the WebCenter Content: Imaging product of Oracle, affecting versions 12.2.1.4.0 and 14.1.2.0.0. It allows easy exploitation by an unauthenticated attacker with network access via HTTP, potentially leading to takeover of WebCenter Content: Imaging.
- CVE-2026-60503High
Vulnerability in WebCenter Content: Imaging (Core component) allows a low-privileged attacker to take over the system over the network via HTTP. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.
- CVE-2026-60472High
Vulnerability in Oracle Fusion Middleware's WebCenter Content: Imaging product (component: Core). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging.
- CVE-2026-60469High
Vulnerability in WebCenter Content: Imaging (Fusion Middleware). Low-privileged attacker via HTTP can compromise data confidentiality and integrity, requiring user interaction, affecting other products.
- CVE-2026-60468High
Vulnerability in WebCenter Content: Imaging (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain full access to critical data and modify some data.
- CVE-2026-60465High
Vulnerability in WebCenter Content: Imaging (Core component) allows a low-privileged attacker to take over the system over the network via T3 and IIOP protocols. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.
- CVE-2026-60464High
Vulnerability in Oracle Fusion Middleware's WebCenter Content: Imaging product (component: Core). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging.
- CVE-2026-60452High
Vulnerability in WebCenter Content: Imaging (component: Core) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can access critical data and modify it, also impacting other products.
- CVE-2026-60451High
Vulnerability in WebCenter Content: Imaging (component: Core) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can access critical data and modify it.
Original NVD description (English source)
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in WebCenter Content: Imaging, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all WebCenter Content: Imaging accessible data as well as unauthorized access to critical data or complete access to all WebCenter Content: Imaging accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N).