CVE-2026-60468: High severity Oracle WebCenter Content: Imaging (Oracle Fusion Middleware) vulnerability
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all WebCenter Content: Imaging accessible data as well as unauthorized update, insert or delete access to some of WebCenter Content: Imaging accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
The affected supported versions are WebCenter Content: Imaging 12.2.1.4.0 and 14.1.2.0.0 in Oracle Fusion Middleware. The vulnerable component is Core.
What level of access does an attacker need to exploit this issue?
An attacker needs network access to the target over HTTP and low-privileged access. No user interaction is required, and the attack complexity is low.
What could a successful attacker do?
A successful attack can expose critical data or provide complete access to all data accessible through WebCenter Content: Imaging. It can also allow unauthorized update, insert, or delete operations on some accessible data.