CVE-2026-35270

CriticalCVSS 9.1

Published: 17/06/2026(UTC)Updated: 18/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.49%

38th percentile — higher than 38% of all known CVEs

Summary

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a high privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Attacks may also significantly impact additional products.

Risk Assessment

The risk to the organization is high, as successful attacks can lead to complete takeover of Oracle WebCenter Content, affecting confidentiality, integrity, and availability of data.

Recommendation

It is recommended to update to the latest version of Oracle WebCenter Content and implement appropriate security measures to restrict access to the system to trusted users.

Original NVD description (English source)

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. While the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).