CVE-2026-60558: Infoleak
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60558?
The severity of CVE-2026-60558 is high, rated at 8.1.
How do I fix CVE-2026-60558?
To fix CVE-2026-60558, upgrade to a patched version of Oracle WebCenter Sites that addresses this vulnerability.
Who is affected by CVE-2026-60558?
Users of Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 are affected by CVE-2026-60558.
What type of vulnerability is CVE-2026-60558?
CVE-2026-60558 is classified as an information leak vulnerability.
What impact does CVE-2026-60558 have on an Oracle WebCenter Sites installation?
CVE-2026-60558 allows unauthenticated attackers with network access via HTTP to compromise the affected Oracle WebCenter Sites installations.