CVE-2026-61290

HighCVSS 7.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Summary

Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP, under difficult exploitation conditions and requiring user interaction, can compromise the system. CVSS score is 7.1.

Risk Assessment

The risk is significant as an attacker can gain full control over Oracle WebCenter Content, potentially leading to loss of confidentiality, integrity, and availability.

Recommendation

Apply Oracle patches. Restrict network access to the service and educate users about the risks of interacting with untrusted content.

Original NVD description (English source)

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H).