CVE-2026-35322: High severity Oracle Oracle WebCenter Content vulnerability
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to Oracle WebCenter Content HTTP interfaces: block or limit public HTTP access via firewall/ACLs so only trusted management IPs or internal networks can reach the application until a vendor fix is available.
- Compensating control
Place Oracle WebCenter Content behind a Web Application Firewall (WAF) or HTTP gateway to detect and block exploitation attempts (virtual patching) while awaiting an official patch.
- Compensating control
Isolate the hosts running Oracle WebCenter Content (move to segmented VLAN, apply host-based firewall rules, or otherwise restrict lateral network connectivity) to reduce impact if the application is compromised.
- Operational
Increase logging and monitoring for Oracle WebCenter Content, review access and application logs for suspicious activity, and perform incident response if indicators of compromise are found. If compromise is suspected, rotate credentials, API keys, and any exposed secrets used by the affected application.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35322?
CVE-2026-35322 has a high severity rating of 8.8.
How do I fix CVE-2026-35322?
To fix CVE-2026-35322, you should apply the necessary security updates provided by Oracle for affected versions.
What versions are affected by CVE-2026-35322?
The affected versions for CVE-2026-35322 are Oracle WebCenter Content 12.2.1.4.0 and 14.1.2.0.0.
What type of access is required to exploit CVE-2026-35322?
CVE-2026-35322 can be exploited by a low privileged attacker with network access via HTTP.
What components of Oracle are impacted by CVE-2026-35322?
CVE-2026-35322 impacts the Content Server component of the Oracle WebCenter Content product in Oracle Fusion Middleware.