Description
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all WebCenter Content: Imaging accessible data as well as unauthorized update, insert or delete access to some of WebCenter Content: Imaging accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).
Published: 2026-07-21
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The flaw is located in the Core component of Oracle WebCenter Content: Imaging. It allows a low‑privileged attacker who can reach the application over HTTP to read, update, or delete any data that the application exposes, resulting in high confidentiality impact and low integrity impact.

Affected Systems

Oracle WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0 are impacted.

Risk and Exploitability

The CVSS v3.1 base score of 7.1 indicates a high confidentiality impact and low integrity impact. The EPSS score is below 1%, and the vulnerability is not listed in the CISA KEV catalog, suggesting a very low current exploitation probability. The attack vector is network-based HTTP and requires only a low‑privileged account, so the barrier to exploitation is relatively low, but overall risk remains moderate due to the lack of reported exploitation activity.

Generated by OpenCVE AI on August 4, 2026 at 03:51 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the Oracle patch released in July 2026 (CPU Jul 2026 advisory) or upgrade to a fixed product version
  • Enforce role‑based access control policies so users have only the permissions necessary for their duties within WebCenter Content: Imaging
  • Restrict the HTTP interface of WebCenter Content: imaging using firewall rules or IP whitelisting to allow access only from trusted IP addresses

Generated by OpenCVE AI on August 4, 2026 at 03:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 04 Aug 2026 04:15:00 +0000

Type Values Removed Values Added
Title Unauthorized Data Access and Modification via Low-Privileged Network Attack in Oracle WebCenter Content: Imaging

Thu, 30 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Title Unauthorized Data Access and Modification via Access Control Violation in Oracle WebCenter Content: Imaging

Fri, 24 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Title Unauthorized Data Access and Modification via Access Control Violation in Oracle WebCenter Content: Imaging

Fri, 24 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 21 Jul 2026 22:00:00 +0000

Type Values Removed Values Added
Description Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all WebCenter Content: Imaging accessible data as well as unauthorized update, insert or delete access to some of WebCenter Content: Imaging accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).
First Time appeared Oracle
Oracle webcenter Content Imaging
CPEs cpe:2.3:a:oracle:webcenter_content__imaging:12.2.1.4.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:webcenter_content__imaging:14.1.2.0.0:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle webcenter Content Imaging
References
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N'}

Subscriptions

Oracle Webcenter Content Imaging
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2026-07-24T14:21:54.362Z

Reserved: 2026-07-08T15:51:40.537Z

Link: CVE-2026-60451

cve-icon Vulnrichment

Updated: 2026-07-24T14:21:50.723Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T04:00:03Z

Weaknesses