CVE-2026-61291

HighCVSS 7.8

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

3th percentile - higher than 3% of all known CVEs

Summary

Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with local access can fully compromise the system. CVSS score is 7.8.

Risk Assessment

The risk is high as an attacker can gain full control over Oracle WebCenter Content, potentially leading to loss of confidentiality, integrity, and availability.

Recommendation

Apply patches provided by Oracle for affected versions. Restrict local access to the system to trusted users only.

Original NVD description (English source)

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle WebCenter Content executes to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).