CVE-2026-60635: XSS
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60635?
The severity of CVE-2026-60635 is rated as high, with a score of 8.8.
How do I fix CVE-2026-60635?
To fix CVE-2026-60635, ensure that you update your Oracle WebCenter Content to the latest patched version available.
What are the affected versions for CVE-2026-60635?
The affected versions for CVE-2026-60635 are 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content.
Can CVE-2026-60635 be exploited remotely?
Yes, CVE-2026-60635 can be exploited by an unauthenticated attacker with network access via HTTP.
What types of vulnerabilities are associated with CVE-2026-60635?
CVE-2026-60635 is associated with Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerabilities.