CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.06)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-60472
High

Vulnerability in Oracle Fusion Middleware's WebCenter Content: Imaging product (component: Core). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging.

CVE-2026-60471
High

Vulnerability in WebCenter Content: Imaging product of Oracle Fusion Middleware, component Core. Affects versions 12.2.1.4.0 and 14.1.2.0.0. A difficult-to-exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment to take over WebCenter Content: Imaging. Attacks may significantly impact additional products (scope change).

CVE-2026-60470
High

Vulnerability in WebCenter Content: Imaging (component: Core) in Oracle Fusion Middleware. A low-privileged attacker via HTTP, with user interaction, can gain unauthorized access to critical data and the ability to create, delete, or modify it, affecting other products.

CVE-2026-60469
High

Vulnerability in WebCenter Content: Imaging (Fusion Middleware). Low-privileged attacker via HTTP can compromise data confidentiality and integrity, requiring user interaction, affecting other products.

CVE-2026-60468
High

Vulnerability in WebCenter Content: Imaging (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain full access to critical data and modify some data.

CVE-2026-60467
High

Vulnerability in Oracle Fusion Middleware WebCenter Content: Imaging product (Core component). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, requires network access via HTTP and user interaction. Successful attack can lead to takeover of WebCenter Content: Imaging.

CVE-2026-60466
High

Vulnerability in Oracle Fusion Middleware WebCenter Content: Imaging (Core component). Versions 12.2.1.4.0 and 14.1.2.0.0 are affected. A high-privileged attacker with network access via HTTP can easily exploit this, leading to full system takeover.

CVE-2026-60465
High

Vulnerability in WebCenter Content: Imaging (Core component) allows a low-privileged attacker to take over the system over the network via T3 and IIOP protocols. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.

CVE-2026-60464
High

Vulnerability in Oracle Fusion Middleware's WebCenter Content: Imaging product (component: Core). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging.

CVE-2026-60462
High

Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to take over the system.

CVE-2026-60454
High

Vulnerability in Oracle HTTP Server (Core component) allows a low-privileged attacker with local access to easily take over the server.

CVE-2026-60452
High

Vulnerability in WebCenter Content: Imaging (component: Core) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can access critical data and modify it, also impacting other products.

CVE-2026-60451
High

Vulnerability in WebCenter Content: Imaging (component: Core) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can access critical data and modify it.

CVE-2026-60450
High

Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to take over the system.

CVE-2026-60449
High

Vulnerability in Oracle WebCenter Content (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with local access can gain full access to all data stored in WebCenter Content, and the attack may impact other products (scope change).

CVE-2026-60448
High

Vulnerability in Oracle WebCenter Content (Fusion Middleware). Difficult to exploit, unauthenticated attacker via HTTP can compromise data confidentiality and integrity, affecting other products.

CVE-2026-60444
High

Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can access critical data and modify it, also impacting other products.

CVE-2026-60443
High

Vulnerability in Oracle WebCenter Content (Fusion Middleware). Low-privileged attacker via HTTP can compromise data confidentiality and integrity, requiring user interaction, affecting other products.

CVE-2026-60440
High

Vulnerability in Oracle Fusion Middleware Service Delivery Platform (component: Messaging Enabler). A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or full access to all platform data.

CVE-2026-60437
High

Vulnerability in Oracle Fusion Middleware Oracle Unified Directory product (OUD Core component). Affects versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable by authenticated high-privileged attacker via LDAP. Can lead to unauthorized data modification and complete denial of service (DOS).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS