This vulnerability affects Oracle WebCenter Content: Imaging (component: Core) in versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable by an attacker with low privileges and network access via HTTP, allowing compromise of the product. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor advisory references Oracle's July 2026 Critical Patch Update but does not explicitly confirm a patch for this specific CVE. Oracle urges customers to remain on supported versions and apply patches without delay.

Successful exploitation can lead to complete compromise of Oracle WebCenter Content: Imaging, affecting confidentiality, integrity, and availability of the system. This could allow an attacker to take over the affected product, potentially leading to unauthorized data access, modification, or service disruption.

Oracle's advisory strongly recommends applying Critical Patch Updates promptly to address vulnerabilities. However, the vendor advisory does not explicitly confirm the availability of a specific patch for CVE-2026-60464. Users should monitor Oracle's Critical Patch Update documentation and apply relevant patches as soon as they become available. Until a patch is confirmed, restrict network access to the affected product and follow Oracle's security best practices for WebCenter Content: Imaging.