CVE-2026-46788: High severity Oracle Oracle WebCenter Content vulnerability
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 8.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to Oracle WebCenter Content HTTP endpoints to trusted IPs only (firewall/ACL or VPN), place the service behind a web application firewall (WAF) or otherwise block direct Internet/unauthenticated HTTP access to the application.
- Compensating control
Reduce exposure to required human interaction by applying email and web filtering to block malicious links/attachments, enforcing safe browsing controls, and conducting targeted user awareness for phishing/social‑engineering risks.
- Operational
Review and limit high‑privilege accounts for Oracle WebCenter Content, enforce principle of least privilege, rotate credentials for high‑privilege accounts, and audit recent high‑privilege activity for signs of compromise.
Event History
Frequently Asked Questions
What access and conditions does an attacker need to exploit this issue?
Exploitation requires an attacker who already has high privileges in Oracle WebCenter Content and network access to the affected service over HTTP. A separate person must also perform an interaction for the attack to succeed.
Which deployment is identified as affected?
The affected supported version identified is Oracle WebCenter Content Content Server 14.1.2.0.0. The available information does not state whether the vulnerable condition is enabled in a default configuration.
What is the potential impact of successful exploitation?
A successful attack can result in takeover of Oracle WebCenter Content, with high impacts to confidentiality, integrity, and availability. Because the vulnerability has scope change, the attack may also significantly affect additional products.