CVE-2026-60523: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Ora
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Content accessible data as well as unauthorized access to critical data or complete access to all Oracle WebCenter Content accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N).
AI Analysis
Technical Summary
This vulnerability affects Oracle WebCenter Content (component: Content Server) in versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable by an attacker with low privileges who has network access via HTTP. Exploitation requires human interaction from a user other than the attacker. The vulnerability can result in unauthorized creation, deletion, or modification of critical data within Oracle WebCenter Content, with a scope change that may affect other Oracle products. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, user interaction required, scope changed, and high confidentiality and integrity impacts with no availability impact. No official patch or remediation level is stated in the advisory, and no known exploits in the wild have been reported as of the publication date. The vendor advisory references the Oracle Critical Patch Update for July 2026 but does not explicitly confirm patch availability for this specific vulnerability.
Potential Impact
Successful exploitation of this vulnerability can lead to unauthorized creation, deletion, or modification of critical data in Oracle WebCenter Content, severely impacting confidentiality and integrity of data. The vulnerability's scope change means that other Oracle products may also be significantly impacted. There is no reported impact on availability. The CVSS 3.1 base score of 8.7 reflects a high severity level due to the potential for significant data compromise.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle recommends applying security patches without delay and remaining on actively supported versions. Since no explicit patch or temporary fix is stated for this vulnerability in the advisory, organizations should monitor Oracle's Critical Patch Updates closely and apply relevant updates as soon as they become available. Until a patch is applied, limit network exposure of Oracle WebCenter Content and enforce strict access controls to reduce risk.
CVE-2026-60523: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Ora
Description
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Content accessible data as well as unauthorized access to critical data or complete access to all Oracle WebCenter Content accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N).
CVSS v3.1
Score 8.7high
Affected software
pkg:maven/com.oracle.webcenter/contentRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects Oracle WebCenter Content (component: Content Server) in versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable by an attacker with low privileges who has network access via HTTP. Exploitation requires human interaction from a user other than the attacker. The vulnerability can result in unauthorized creation, deletion, or modification of critical data within Oracle WebCenter Content, with a scope change that may affect other Oracle products. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, user interaction required, scope changed, and high confidentiality and integrity impacts with no availability impact. No official patch or remediation level is stated in the advisory, and no known exploits in the wild have been reported as of the publication date. The vendor advisory references the Oracle Critical Patch Update for July 2026 but does not explicitly confirm patch availability for this specific vulnerability.
Potential Impact
Successful exploitation of this vulnerability can lead to unauthorized creation, deletion, or modification of critical data in Oracle WebCenter Content, severely impacting confidentiality and integrity of data. The vulnerability's scope change means that other Oracle products may also be significantly impacted. There is no reported impact on availability. The CVSS 3.1 base score of 8.7 reflects a high severity level due to the potential for significant data compromise.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle recommends applying security patches without delay and remaining on actively supported versions. Since no explicit patch or temporary fix is stated for this vulnerability in the advisory, organizations should monitor Oracle's Critical Patch Updates closely and apply relevant updates as soon as they become available. Until a patch is applied, limit network exposure of Oracle WebCenter Content and enforce strict access controls to reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- oracle
- Date Reserved
- 2026-07-08T15:51:40.542Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://www.oracle.com/security-alerts/cpujul2026.html","vendor":"Oracle"}]
Threat ID: 6a5fedf09c2644c7f8d59ba8
Added to database: 07/21/2026, 22:08:48 UTC
Last enriched: 07/30/2026, 00:22:57 UTC
Last updated: 09/05/2026, 10:52:10 UTC
Views: 53
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.