CVE-2026-60452
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Vulnerability in WebCenter Content: Imaging (component: Core) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can access critical data and modify it, also impacting other products.
Risk Assessment
Risk of confidential document leakage and data integrity compromise in the content management system, with potential impact on related applications.
Recommendation
Apply the Oracle patch for versions 12.2.1.4.0 and 14.1.2.0.0. Restrict user privileges to the minimum necessary.
Other vulnerabilities in WebCenter Content: Imaging
See all- CVE-2026-46784Critical
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system. The attacker can gain unauthorized access to critical data and has the ability to create, delete, or modify data.
- CVE-2026-46783Critical
Vulnerability in the WebCenter Content: Imaging product of Oracle, affecting versions 12.2.1.4.0 and 14.1.2.0.0. It allows easy exploitation by an unauthenticated attacker with network access via HTTP, potentially leading to takeover of WebCenter Content: Imaging.
- CVE-2026-87379Medium
Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via SOAP can gain unauthorized read access to a subset of data.
- CVE-2026-87378Medium
Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data.
- CVE-2026-87377Medium
Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging version 14.1.2.0.0. A low-privileged attacker with network access via SOAP can create, delete or modify critical data and gain unauthorized access to it.
- CVE-2026-87376Medium
Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging version 14.1.2.0.0. A low-privileged attacker with network access via HTTP can create, delete or modify critical data and gain unauthorized access to it.
- CVE-2026-87375Medium
Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data.
- CVE-2026-60503High
Vulnerability in WebCenter Content: Imaging (Core component) allows a low-privileged attacker to take over the system over the network via HTTP. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.
- CVE-2026-60472High
Vulnerability in Oracle Fusion Middleware's WebCenter Content: Imaging product (component: Core). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging.
- CVE-2026-60470High
Vulnerability in WebCenter Content: Imaging (component: Core) in Oracle Fusion Middleware. A low-privileged attacker via HTTP, with user interaction, can gain unauthorized access to critical data and the ability to create, delete, or modify it, affecting other products.
Original NVD description (English source)
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging. While the vulnerability is in WebCenter Content: Imaging, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all WebCenter Content: Imaging accessible data as well as unauthorized update, insert or delete access to some of WebCenter Content: Imaging accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

