CVE-2026-60638: Input Validation
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60638?
The severity of CVE-2026-60638 is high with a CVSS score of 8.8.
How do I fix CVE-2026-60638?
To fix CVE-2026-60638, apply the latest security patches provided by Oracle for the affected versions of Oracle WebCenter Content.
What products are affected by CVE-2026-60638?
CVE-2026-60638 affects the Oracle WebCenter Content product in the versions 12.2.1.4.0 and 14.1.2.0.0.
What types of attacks are enabled by CVE-2026-60638?
CVE-2026-60638 allows unauthenticated attackers with network access via HTTP to exploit the vulnerability.
What categories of vulnerabilities does CVE-2026-60638 fall under?
CVE-2026-60638 is categorized under Input Validation, XSS, and CSRF vulnerabilities.