CVE-2026-60637: Input Validation
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60637?
The severity of CVE-2026-60637 is high with a CVSS score of 8.8.
How do I fix CVE-2026-60637?
To fix CVE-2026-60637, it is recommended to update to a patched version of Oracle WebCenter Content.
Who is affected by CVE-2026-60637?
CVE-2026-60637 affects users of Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0.
What type of vulnerability is CVE-2026-60637 classified as?
CVE-2026-60637 is classified as an easily exploitable vulnerability involving input validation, XSS, and CSRF issues.
Can CVE-2026-60637 be exploited remotely?
Yes, CVE-2026-60637 can be exploited remotely by an unauthenticated attacker with network access via HTTP.