Oracle WebCenter Content vulnerabilities
81 known CVE vulnerabilities in Oracle WebCenter Content, translated and rated.
- CVE-2026-60646High
Vulnerability in Oracle WebCenter Content (component: Web Content Management) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, requires low-privileged attacker with network access via HTTP and victim interaction. Successful attack can lead to takeover of Oracle WebCenter Content.
- CVE-2026-60645High
Vulnerability in Oracle WebCenter Content from Oracle Fusion Middleware (component: Web Content Management). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. A high-privileged attacker with network access via HTTP can easily exploit this vulnerability, potentially leading to full system takeover.
- CVE-2026-60643High
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, requires low-privileged attacker with network access via HTTP and victim interaction. Successful attack can lead to takeover of Oracle WebCenter Content.
- CVE-2026-60642High
Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker via HTTP to gain unauthorized access to critical data, modify it, and cause partial denial of service. User interaction is required.
- CVE-2026-60641High
Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker over HTTP, with user interaction, to access critical data, modify it, and cause partial denial of service.
- CVE-2026-60640High
Vulnerability in Oracle WebCenter Content (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can, under difficult conditions and with user interaction, take over the server via HTTP, affecting other products.
- CVE-2026-60639High
Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker over HTTP, with user interaction, to fully compromise the system.
- CVE-2026-60638High
Vulnerability in Oracle WebCenter Content (Oracle Fusion Middleware) allows an unauthenticated attacker with network access via HTTP, requiring user interaction, to take over the system. Affects versions 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-60637High
Vulnerability in Oracle WebCenter Content (component: Content Server) allows an unauthenticated attacker with network access via HTTP to compromise the system. User interaction is required.
- CVE-2026-60636High
Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker over HTTP, with user interaction, to fully compromise the system.
- CVE-2026-60635High
Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker over HTTP, with user interaction, to fully compromise the system.
- CVE-2026-60634High
Vulnerability in Oracle WebCenter Content (component: Content Server) allows an unauthenticated attacker with network access via HTTP to compromise the system. User interaction is required.
- CVE-2026-60633High
Vulnerability in Oracle WebCenter Content (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker can, with user interaction, take over the server via HTTP.
- CVE-2026-60525High
Vulnerability in Oracle WebCenter Content (Content Server component) allows a low-privileged attacker over HTTP to gain unauthorized access and modify critical data. Exploitation is difficult and impacts other products.
- CVE-2026-60523High
Vulnerability in Oracle WebCenter Content (Fusion Middleware). Low-privileged attacker via HTTP can compromise data confidentiality and integrity, requiring user interaction, affecting other products.
- CVE-2026-60522High
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker via HTTP, requiring user interaction, can access and modify data.
- CVE-2026-60462High
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to take over the system.
- CVE-2026-60450High
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to take over the system.
- CVE-2026-60449High
Vulnerability in Oracle WebCenter Content (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with local access can gain full access to all data stored in WebCenter Content, and the attack may impact other products (scope change).
- CVE-2026-60448High
Vulnerability in Oracle WebCenter Content (Fusion Middleware). Difficult to exploit, unauthenticated attacker via HTTP can compromise data confidentiality and integrity, affecting other products.
- CVE-2026-60444High
Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can access critical data and modify it, also impacting other products.
- CVE-2026-60443High
Vulnerability in Oracle WebCenter Content (Fusion Middleware). Low-privileged attacker via HTTP can compromise data confidentiality and integrity, requiring user interaction, affecting other products.
- CVE-2026-60335High
Vulnerability in Oracle WebCenter Content (component: Content Server). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to take over the system.
- CVE-2026-60334High
Vulnerability in Oracle WebCenter Content (Content Server component) allows a low-privileged attacker to take over the system over the network via HTTP. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.
- CVE-2026-35327High
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTPS to compromise the system. Successful attacks require human interaction, potentially leading to unauthorized access to critical data.
- CVE-2026-35326High
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a high privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-35325High
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to take over Oracle WebCenter Content. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-35324High
A vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-35322High
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. It affects versions 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-35317High
A vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows low privileged attackers with network access via HTTP to compromise Oracle WebCenter Content. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.
- CVE-2026-35315High
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Affects versions 12.2.1.4.0 and 14.1.2.0.0.

