This vulnerability in Oracle WebCenter Content: Imaging (component: Core) affects versions 12.2.1.4.0 and 14.1.2.0.0. It permits a low privileged attacker with network access over HTTP to compromise the system, resulting in unauthorized access to critical data and partial unauthorized modification capabilities. The vulnerability has a CVSS 3.1 score of 8.5 with vector AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N, indicating network attack vector, low attack complexity, low privileges required, no user interaction, scope change, high confidentiality impact, low integrity impact, and no availability impact. While the vulnerability is in WebCenter Content: Imaging, it may significantly impact other products as well. No official patch or remediation level is stated in the advisory, but Oracle's July 2026 Critical Patch Update advisory references this vulnerability among many others and recommends applying patches promptly.

Successful exploitation can lead to unauthorized access to critical data within WebCenter Content: Imaging and unauthorized ability to update, insert, or delete some accessible data. The confidentiality impact is high, integrity impact is low, and availability is not affected. The vulnerability scope change indicates potential impact on additional Oracle products beyond WebCenter Content: Imaging.

Oracle's July 2026 Critical Patch Update advisory includes this vulnerability among 1449 security patches. Although no explicit patch or remediation level is stated for CVE-2026-60452 in the provided advisory content, Oracle strongly recommends customers apply the latest Critical Patch Update without delay to mitigate this and other vulnerabilities. Patch status is not yet confirmed explicitly for this CVE; therefore, check the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current patch availability and remediation instructions.