This vulnerability in Oracle WebCenter Content: Imaging (component: Core) allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation requires user interaction from a person other than the attacker and can result in unauthorized creation, deletion, or modification of critical data accessible through WebCenter Content: Imaging. The scope of impact may extend beyond the Imaging component to other related products. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, user interaction required, scope change, and high confidentiality and integrity impact without availability impact. Affected versions explicitly include 12.2.1.4.0 and 14.1.2.0.0. The vendor advisory is part of Oracle's July 2026 Critical Patch Update, which addresses this and many other vulnerabilities, but no explicit patch or remediation details for this specific CVE are provided in the advisory content.

Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within WebCenter Content: Imaging. The vulnerability affects confidentiality and integrity of data, potentially allowing attackers to gain unauthorized access to or manipulate sensitive information. There is no impact on availability reported. The vulnerability also has a scope change, meaning it may affect additional Oracle products beyond WebCenter Content: Imaging.

Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory. However, no explicit patch or remediation details for CVE-2026-60469 are provided in the advisory content. Customers are strongly advised to review the July 2026 Critical Patch Update from Oracle and apply all relevant security patches promptly to mitigate this and other vulnerabilities. Since the vulnerability requires user interaction, educating users to recognize and avoid suspicious interactions may reduce risk. Patch status is not yet confirmed — check the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance.