CVE-2026-60463
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
Vulnerability in WebCenter Content: Imaging (Core component) allows unauthenticated attacker via T3/IIOP to take over the system. CVSS 9.8.
Risk Assessment
An attacker can compromise the Imaging system, threatening the confidentiality and integrity of image data.
Recommendation
Apply the Oracle security patch for versions 12.2.1.4.0 and 14.1.2.0.0.
Other vulnerabilities in Oracle WebCenter Content Imaging
See all- CVE-2026-87392Medium
Vulnerability in WebCenter Content: Imaging (Core component) affecting version 14.1.2.0.0. A low-privileged attacker with SOAP network access can gain unauthorized creation, deletion or modification of critical data.
- CVE-2026-87391Medium
Vulnerability in WebCenter Content: Imaging (Core component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A high-privileged attacker logged into the infrastructure can, with user interaction, gain unauthorized access to critical data or all product data, with possible impact on other products.
Original NVD description (English source)
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in takeover of WebCenter Content: Imaging. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS