CVE-2026-35315: High severity Oracle WebCenter Content vulnerability
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to Oracle WebCenter Content HTTP interfaces: block or limit HTTP access to trusted IPs via firewall/ACLs, place the application behind a WAF, and deny direct internet access where possible (the vulnerability is exploitable via HTTP).
- Compensating control
Increase monitoring and logging for Oracle WebCenter Content HTTP access and look for signs of exploitation; deploy detection rules and alerting for anomalous activity against these services.
- Operational
Identify and inventory all Oracle WebCenter Content instances in your environment and determine which are running the affected supported versions: 12.2.1.4.0 and 14.1.2.0.0.
- Operational
If any instance is suspected to be compromised (the advisory indicates successful attacks can result in takeover), isolate affected systems, perform incident response and forensics, and rotate any credentials or secrets that may have been exposed.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35315?
The severity of CVE-2026-35315 is high with a score of 8.8.
How do I fix CVE-2026-35315?
To fix CVE-2026-35315, update to the latest patched version of Oracle WebCenter Content.
Who is affected by CVE-2026-35315?
CVE-2026-35315 affects users of Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0.
What types of attacks can exploit CVE-2026-35315?
CVE-2026-35315 can be exploited by low privileged attackers with network access via HTTP.
What is the impact of CVE-2026-35315 if exploited?
Exploitation of CVE-2026-35315 can lead to high levels of compromise affecting confidentiality, integrity, and availability.