Threats affecting pkg:maven/com.oracle/webcenter-content

25 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.6	EPSS 0.3%	CVE-2026-35327Oracle WebCenter Content · Improper Access Control High7.6EPSS 0.3%2026-06-16CVE Database V5CVE-2026-35327 CVE-2026-35327 is a high-severity vulnerability in Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTPS to compromise the product, requiring user interaction from a third party. Successful exploitation can lead to unauthorized access to critical data and unauthorized modification of some data. The vulnerability also has a scope change, potentially impacting additional Oracle products. The CVSS 3.1 base score is 7.6, indicating significant confidentiality and integrity impacts. EPSS 0.3%Vulnerability CWE-284	CVE Database V5	2026-06-16
High	8.8	EPSS 0.4%	CVE-2026-35325Oracle WebCenter Content · Improper Access Control High8.8EPSS 0.4%2026-06-16CVE Database V5CVE-2026-35325 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-06-16
High	8.8	EPSS 0.4%	CVE-2026-35322Oracle WebCenter Content · Improper Access Control High8.8EPSS 0.4%2026-06-16CVE Database V5CVE-2026-35322 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-06-16
High	8.8	EPSS 0.4%	CVE-2026-35317Oracle WebCenter Content · Improper Access Control High8.8EPSS 0.4%2026-06-16CVE Database V5CVE-2026-35317 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-06-16
High	8.8	EPSS 0.4%	CVE-2026-35315Oracle WebCenter Content · Improper Access Control High8.8EPSS 0.4%2026-06-16CVE Database V5CVE-2026-35315 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). EPSS 0.4%Vulnerability CWE-284	CVE Database V5	2026-06-16

Page 2 of 2