CVE-2026-60450: High severity Oracle Oracle WebCenter Content vulnerability
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle WebCenter Content (Oracle Fusion Middleware) - Content Serverto a version that resolves this vulnerability.Fixed in 12.2.1.4.0 - Upgrade
Upgrade
Oracle WebCenter Content (Oracle Fusion Middleware) - Content Serverto a version that resolves this vulnerability.Fixed in 14.1.2.0.0 - Compensating control
Restrict network access to Oracle WebCenter Content (Content Server) over HTTPS so unauthenticated attackers cannot reach it (e.g., allow only trusted IPs at the firewall/load balancer).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60450?
The severity of CVE-2026-60450 is rated high with a score of 8.1.
What software is affected by CVE-2026-60450?
CVE-2026-60450 affects the Oracle WebCenter Content product in Oracle Fusion Middleware.
How do I fix CVE-2026-60450?
To fix CVE-2026-60450, update to the latest version of Oracle WebCenter Content that is not affected.
What type of attack vector does CVE-2026-60450 utilize?
CVE-2026-60450 can be exploited by an unauthenticated attacker with network access via HTTPS.
What impact does CVE-2026-60450 have on confidentiality, integrity, and availability?
CVE-2026-60450 has a high impact on confidentiality, integrity, and availability.