CVE-2026-60463

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in takeover of WebCenter Content: Imaging. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - secalert_us@oracle.com

Published

2026-07-21

Last modified

2026-10-24

Weaknesses

CWE-306

Affected products

• Webcenter Content (Oracle)
• Webcenter Content Imaging (Oracle)

References

• https://www.oracle.com/security-alerts/cpujul2026.html