CVE-2026-60554: Infoleak
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60554?
CVE-2026-60554 has a high severity rating of 7.5.
What versions of Oracle WebCenter Sites are affected by CVE-2026-60554?
The affected versions of Oracle WebCenter Sites include 12.2.1.4.0 and 14.1.2.0.0.
What type of exploit is possible with CVE-2026-60554?
CVE-2026-60554 allows an unauthenticated attacker with network access via HTTP to exploit the vulnerability.
What impact does CVE-2026-60554 have on data confidentiality?
CVE-2026-60554 can lead to a compromise of data confidentiality due to the information leakage.
How do I mitigate the risks associated with CVE-2026-60554?
To mitigate CVE-2026-60554, it is recommended to apply security patches provided by Oracle for the affected versions.