CVE-2026-46806: High severity Oracle Oracle WebCenter Content vulnerability
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Content accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Content accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable or restrict external HTTPS access to Oracle WebCenter Content if not required. Configure the application or its fronting proxy to accept connections only from internal/trusted networks or administrative hosts.
Oracle WebCenter Content (Content Server) HTTPS external access = disabled / restricted - Compensating control
Restrict access to Oracle WebCenter Content HTTPS endpoints at the network perimeter (firewall, load balancer or reverse proxy) to trusted IP ranges and management subnets only.
- Compensating control
Deploy a web application firewall (WAF) or intrusion prevention system in front of Oracle WebCenter Content to inspect and block malicious requests targeting the application until a vendor fix is available.
- Operational
Monitor and audit access logs and alerts for signs of exploitation. If compromise is suspected, isolate affected systems, rotate credentials and secrets that may have been exposed, and restore services from known-good backups.
Event History
Frequently Asked Questions
Which deployments are exposed, and what access does an attacker need?
Oracle WebCenter Content Content Server version 14.1.2.0.0 is identified as affected. The attacker must have network access to the target over HTTPS, but does not need authentication or prior privileges.
Can this be exploited without user interaction?
No. Exploitation requires human interaction by someone other than the attacker, despite the attacker needing no authentication.
What could an attacker do after successful exploitation?
A successful attack can expose critical data or all data accessible through Oracle WebCenter Content. It can also allow unauthorized updates, inserts, or deletions to some accessible data, and may significantly affect additional products because the vulnerability has scope change.