CVE-2026-60983: High severity Oracle Oracle WebCenter Content vulnerability
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 14.1.2.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. While the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Content accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker needs network access to the affected Oracle WebCenter Content Content Server over HTTP and low-level privileges. No user interaction is required.
Which deployments are known to be affected?
The affected supported versions are Oracle WebCenter Content 14.1.2.0.0 and 12.2.1.4.0. The issue is in the Content Server component.
What is the likely impact of successful exploitation?
A successful attacker can obtain unauthorized access to critical data or complete access to all data accessible through Oracle WebCenter Content. The scope may extend to additional products impacted by an attack.