CVE-2026-60464: High severity Oracle WebCenter Content: Imaging vulnerability

Published Jul 21, 2026

Updated

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in takeover of WebCenter Content: Imaging. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected Software

3 affected components

Oracle WebCenter Content: Imaging=12.2.1.4.0, =14.1.2.0.0

Oracle WebCenter Content=12.2.1.4.0

Oracle WebCenter Content=14.1.2.0.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Oracle WebCenter Content: Imaging (Oracle Fusion Middleware) - Core to a version that resolves this vulnerability.
Fixed in 12.2.1.4.0
Upgrade
Upgrade Oracle WebCenter Content: Imaging (Oracle Fusion Middleware) - Core to a version that resolves this vulnerability.
Fixed in 14.1.2.0.0

Event History

Jul 21, 2026

CVE Published

via MITRE·09:35 PM

Data Sourced

via MITRE·09:35 PM

DescriptionSeverity

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Which deployments are affected?

The affected supported versions are 12.2.1.4.0 and 14.1.2.0.0 of the WebCenter Content: Imaging Core component.

What access does an attacker need?

An attacker needs network access to the affected component over HTTP and low-privileged credentials. No user interaction is required.

What is the potential impact of successful exploitation?

Successful exploitation can result in takeover of WebCenter Content: Imaging, with high impacts to confidentiality, integrity, and availability.