CVE-2026-46813: Critical severity Oracle Oracle WebCenter Content vulnerability
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Oracle/Oracle WebCenter Contentfrom your environment.If Oracle WebCenter Content is not required, uninstall the product to eliminate the vulnerable component.
- Compensating control
Restrict or block network (HTTP) access to Oracle WebCenter Content from untrusted networks using firewall rules, ACLs, VPNs, or network segmentation. Ensure only trusted management networks can reach the service over HTTP.
- Operational
If there is any suspicion of compromise, isolate affected hosts and perform incident response: restore systems from known-good backups, and rotate credentials, API keys, and other secrets used by the application.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46813?
The severity of CVE-2026-46813 is critical, rated at 9.8 on the CVSS scale.
How do I fix CVE-2026-46813?
To fix CVE-2026-46813, apply the latest security patches provided by Oracle for the affected versions of Oracle WebCenter Content.
What versions are affected by CVE-2026-46813?
The affected versions of Oracle WebCenter Content are 12.2.1.4.0 and 14.1.2.0.0.
Who is impacted by CVE-2026-46813?
Any organization using the affected versions of Oracle WebCenter Content is at risk from CVE-2026-46813.
What type of attacks can exploit CVE-2026-46813?
CVE-2026-46813 can be exploited by unauthenticated attackers with network access via HTTP.