CVE-2026-35324: High severity Oracle WebCenter Content vulnerability
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable public HTTP access to the Content Server or bind the HTTP listener to internal-only interfaces. If disabling is not possible, restrict which source IPs/networks may connect to the HTTP service so that only trusted management networks can reach it.
Oracle WebCenter Content (Content Server) HTTP access = disabled or restricted to trusted IPs - Compensating control
Place the Oracle WebCenter Content service behind a perimeter control such as a firewall or web application firewall (WAF). Block or filter inbound HTTP traffic from untrusted/public networks and allow access only from trusted IPs, VPNs, or management networks.
- Operational
Monitor application and access logs for suspicious activity, investigate any indicators of compromise, isolate affected systems if compromise is suspected, and rotate credentials/keys/accounts that may have been exposed or could be abused as a result of the vulnerability.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35324?
CVE-2026-35324 has a severity rating of high with a CVSS score of 8.8.
How do I fix CVE-2026-35324?
To fix CVE-2026-35324, apply the latest security patch provided by Oracle for the affected versions.
What products are affected by CVE-2026-35324?
CVE-2026-35324 affects Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0.
Who can exploit CVE-2026-35324?
CVE-2026-35324 can be exploited by low privileged attackers with network access via HTTP.
What could an attacker achieve by exploiting CVE-2026-35324?
An attacker exploiting CVE-2026-35324 could compromise Oracle WebCenter Content, leading to unauthorized access and data exposure.