Oracle WebCenter Content vulnerabilities
81 known CVE vulnerabilities in Oracle WebCenter Content, translated and rated.
- CVE-2017-3625High
Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction and can lead to unauthorized access to critical data.
- CVE-2026-60905Critical
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by unauthenticated attacker with network access via HTTP, requiring user interaction. Allows unauthorized modification, full data access, and partial denial of service. CVSS score 9.6.
- CVE-2026-60663Critical
Vulnerability in Oracle WebCenter Content (component: Web Content Management). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by a low privileged attacker with network access via HTTP. Attacks may impact additional products (scope change). Successful attack can lead to full system takeover.
- CVE-2026-60649Critical
Vulnerability in Oracle WebCenter Content (component: Web Content Management). Affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker via HTTP can access and modify critical data.
- CVE-2026-60644Critical
Vulnerability in Oracle WebCenter Content (Web Content Management component) allows unauthenticated attacker via HTTP to take over the system, with impact on other products (scope change). CVSS 10.0.
- CVE-2026-60632Critical
Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker via HTTP to unauthorized create, delete, or modify critical data and gain full access to it. User interaction is required, and the attack may impact additional products.
- CVE-2026-60631Critical
Vulnerability in Oracle WebCenter Content (Oracle Fusion Middleware) in the Content Server component. Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by an unauthenticated attacker with network access via HTTP, but requires human interaction. May impact additional products (scope change). Can lead to unauthorized creation, deletion, or modification of critical data and unauthorized access to all data. CVSS 9.3.
- CVE-2026-60435Critical
Vulnerability in Oracle WebCenter Content (Content Server component) allows unauthenticated attacker via HTTP to take over the system. CVSS 9.8.
- CVE-2026-46813Critical
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to take over Oracle WebCenter Content. Affects versions 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-46805Critical
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction and may significantly impact additional products.
- CVE-2026-46785Critical
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Successful attacks can lead to unauthorized creation, deletion, or modification of critical data.
- CVE-2026-46777Critical
A vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can lead to unauthorized creation, deletion, or modification of critical data.
- CVE-2026-46766Critical
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-35323Critical
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Attacks may significantly impact additional products.
- CVE-2026-35321Critical
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-35320Critical
A vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. This difficult-to-exploit vulnerability may significantly impact additional products.
- CVE-2026-35319Critical
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-35316Critical
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-35286Critical
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. It affects versions 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-35270Critical
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a high privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Attacks may also significantly impact additional products.
- CVE-2026-70858High
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise the system, but requires user interaction. Successful attacks may result in unauthorized modification, read access to a subset of data, and partial denial of service.
- CVE-2026-61295High
Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with local access can gain complete access to critical data, with potential impact on other products.
- CVE-2026-61291High
Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with local access can fully compromise the system. CVSS score is 7.8.
- CVE-2026-61290High
Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP, under difficult exploitation conditions and requiring user interaction, can compromise the system. CVSS score is 7.1.
- CVE-2026-61288High
Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP, requiring user interaction, can gain unauthorized access to critical data and perform unauthorized modifications. CVSS score is 7.1.
- CVE-2026-60983High
Vulnerability in Oracle WebCenter Content (component: Content Server) in versions 14.1.2.0.0 and 12.2.1.4.0. Easily exploitable by a low-privileged attacker over HTTP, allowing unauthorized access to critical data or complete access to all WebCenter Content data. May impact other products (scope change). CVSS 7.7.
- CVE-2026-60981High
Vulnerability in Oracle WebCenter Content (component: Content Server) in versions 14.1.2.0.0 and 12.2.1.4.0. Easily exploitable by a low-privileged attacker over HTTP, requiring user interaction. Allows unauthorized creation, deletion, modification of data and access to critical data. May impact other products (scope change). CVSS 8.7.
- CVE-2026-60980High
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows unauthenticated attacker via HTTP to compromise confidentiality and integrity, with potential impact on other products.
- CVE-2026-60961High
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, requires physical access to network segment, allows unauthorized access and data modification, with potential impact on other products.
- CVE-2026-60955High
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows high-privileged attacker via HTTP to modify data, partially read data and cause partial denial of service, with potential impact on other products.
- CVE-2026-60954High
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows unauthenticated attacker via HTTP to compromise confidentiality and integrity, with potential impact on other products.
- CVE-2026-60949High
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows low-privileged attacker via HTTP to gain unauthorized access to critical data and modify some data, with potential impact on other products.
- CVE-2026-60944High
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can exploit it over HTTP, but user interaction is required. The attack may impact other products (scope change) and lead to unauthorized access to critical data and modification of some data.
- CVE-2026-60935High
Vulnerability in Oracle WebCenter Content (Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, but an unauthenticated attacker can compromise data integrity and confidentiality over HTTP. The attack may impact other products (scope change).
- CVE-2026-60934High
Vulnerability in Oracle WebCenter Content (Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, an unauthenticated attacker can compromise data confidentiality and integrity over HTTP. The attack may impact other products (scope change).
- CVE-2026-60933High
Vulnerability in Oracle WebCenter Content (Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, an unauthenticated attacker can compromise data confidentiality and integrity over HTTP. The attack does not extend beyond this product (no scope change).
- CVE-2026-60928High
Vulnerability in Oracle WebCenter Content (Content Server) version 14.1.2.0.0. An attacker with low privileges and local access can compromise data confidentiality and integrity. The attack may impact other products (scope change).
- CVE-2026-60909High
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. An attacker with low privileges can exploit it over HTTP, but user interaction is required. The attack may impact other products (scope change) and lead to unauthorized access to critical data and modification of some data.
- CVE-2026-60906High
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can gain unauthorized access to critical data via HTTP. The attack does not extend beyond this product (no scope change).
- CVE-2026-60903High
Vulnerability in Oracle WebCenter Content (Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, an unauthenticated attacker can compromise data confidentiality and integrity over HTTP. The attack may impact other products (scope change).
- CVE-2026-60664High
Vulnerability in Oracle WebCenter Content (Oracle Fusion Middleware) allows an unauthenticated attacker with network access via HTTP, requiring user interaction, to take over the system. Affects versions 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-60658High
Vulnerability in Oracle WebCenter Content (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can, under difficult conditions and with user interaction, take over the server via HTTP.
- CVE-2026-60656High
Vulnerability in Oracle WebCenter Content (Web Content Management component) versions 12.2.1.4.0 and 14.1.2.0.0. Low-privileged attacker via HTTP can take over the system.
- CVE-2026-60655High
Vulnerability in Oracle WebCenter Content (Web Content Management component) versions 12.2.1.4.0 and 14.1.2.0.0. Low-privileged attacker via HTTP can take over the system.
- CVE-2026-60653High
Vulnerability in Oracle WebCenter Content (Web Content Management component) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and the ability to create, delete, or modify it.
- CVE-2026-60652High
Vulnerability in Oracle WebCenter Content (component: Web Content Management) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, requires low-privileged attacker with network access via HTTP and victim interaction. Successful attack can lead to takeover of Oracle WebCenter Content.
- CVE-2026-60651High
Vulnerability in Oracle WebCenter Content (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can, with user interaction, take over the server via HTTP.
- CVE-2026-60650High
Vulnerability in Oracle WebCenter Content (component: Web Content Management) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, requires low-privileged attacker with network access via HTTP and victim interaction. Successful attack can lead to takeover of Oracle WebCenter Content.
- CVE-2026-60648High
Vulnerability in Oracle WebCenter Content (component: Web Content Management) allows a low-privileged attacker with network access via HTTP to compromise the system. User interaction is required.
- CVE-2026-60647High
Vulnerability in Oracle WebCenter Content (component: Web Content Management) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data and cause partial denial of service.

