Threats Tagged 'cve-2026-35261'

CVE-2026-46788 is a high-severity vulnerability in Oracle WebCenter Content 14.1.2.0.0 that allows a high privileged attacker with network access via HTTP to compromise the product. Exploitation requires human interaction from a user other than the attacker and can lead to complete takeover of Oracle WebCenter Content. The vulnerability also has the potential to impact additional Oracle products due to scope change. The CVSS 3.1 base score is 8.4, indicating high confidentiality, integrity, and availability impacts.

CVE-2026-35261 is a vulnerability in Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0 that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can lead to unauthorized read, update, insert, or delete access to certain Oracle Access Manager data. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update and strongly recommends applying the patches promptly. No specific patch version is stated in the provided data, but the vendor advisory emphasizes applying the Critical Security Patch Update without delay. Workarounds such as blocking network protocols or removing unnecessary privileges may reduce risk temporarily but could impact functionality.