CVE-2026-60552: Infoleak
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. While the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60552?
CVE-2026-60552 has a critical severity rating of 9.9.
How do I fix CVE-2026-60552?
To mitigate CVE-2026-60552, update Oracle WebCenter Sites to the latest supported version as recommended by Oracle.
What are the affected versions for CVE-2026-60552?
The affected versions for CVE-2026-60552 are 12.2.1.4.0 and 14.1.2.0.0.
What type of vulnerability is CVE-2026-60552?
CVE-2026-60552 is categorized as an information leak vulnerability.
Who can exploit CVE-2026-60552?
CVE-2026-60552 can be exploited by a low privileged attacker with network access via HTTP.