CVE-2026-35319: Critical severity Oracle Oracle WebCenter Content vulnerability
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable HTTP access to the Content Server where feasible. If HTTP must be used, configure the web server or application to only accept requests from internal networks or a limited set of trusted IP addresses.
Oracle WebCenter Content (Content Server) HTTP access = disabled or restricted to internal/trusted IPs - Compensating control
Block or restrict inbound HTTP access to Oracle WebCenter Content at the network perimeter (firewall/ACL). Do not expose the Content Server directly to the public Internet.
- Compensating control
Place Oracle WebCenter Content behind a Web Application Firewall (WAF) and tune rules to detect and block exploitation attempts against the Content Server's HTTP interface.
- Operational
Monitor web server and application logs and network traffic for indicators of exploitation. If compromise is suspected, immediately isolate affected hosts, perform incident response, and rotate any credentials or secrets that may have been exposed.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35319?
The severity of CVE-2026-35319 is critical with a CVSS score of 9.8.
How do I fix CVE-2026-35319?
To mitigate CVE-2026-35319, apply the latest patches provided by Oracle for impacted versions.
What products are affected by CVE-2026-35319?
CVE-2026-35319 affects Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0.
What type of attacker can exploit CVE-2026-35319?
CVE-2026-35319 can be exploited by an unauthenticated attacker with network access via HTTP.
What impact does CVE-2026-35319 have on data confidentiality?
CVE-2026-35319 allows an attacker to compromise the confidentiality, integrity, and availability of data.