CVE-2026-60467: High severity Oracle WebCenter Content: Imaging (Oracle Fusion Middleware) vulnerability
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise WebCenter Content: Imaging. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of WebCenter Content: Imaging. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0 of the WebCenter Content: Imaging Core component.
What does an attacker need to exploit this issue?
An attacker does not need authentication but must have network access to the target over HTTP. Exploitation is difficult and requires interaction by a person other than the attacker.
What is the potential impact of successful exploitation?
A successful attack can result in takeover of WebCenter Content: Imaging, with high confidentiality, integrity, and availability impact.