CVE-2026-35325: High severity Oracle Oracle WebCenter Content vulnerability

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Remove

   Remove oracle/webcenter-content from your environment.

   If Oracle WebCenter Content is not required, uninstall or remove the product from affected hosts to eliminate the vulnerable component until a vendor remediation is available.

2. Configuration

   Restrict or disable HTTP access to the Oracle WebCenter Content server; only allow connections from trusted management IPs or internal application hosts. Apply access control at the application or OS level to prevent direct public HTTP access.

   Oracle WebCenter Content (Content Server) HTTP access = restricted or disabled
3. Compensating control

   Place Oracle WebCenter Content servers behind network controls (firewall, VLAN segmentation) and a web application firewall (WAF). Block or allowlist incoming HTTP traffic so only necessary, trusted sources can reach the service until a vendor fix is applied.

4. Compensating control

   Isolate affected instances from untrusted networks (move to a private network segment or otherwise restrict network reachability) until remediation is available and applied.

5. Operational

   Monitor application and access logs for signs of exploitation or suspicious activity and perform incident response if compromise is detected.

6. Operational

   If compromise is suspected or as a precaution while waiting for a vendor patch, rotate credentials, API keys, and service account credentials used by the Oracle WebCenter Content deployment.

Event History

Frequently Asked Questions