Threats Tagged 'cve-2026-46796'

CVE-2026-46796 is a high-severity vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the product, requiring user interaction from a person other than the attacker. Successful exploitation can lead to full takeover of Oracle WebCenter Sites, impacting confidentiality, integrity, and availability. Oracle has acknowledged the vulnerability in its June 2026 Critical Security Patch Update advisory but has not explicitly confirmed patch availability for these versions. Oracle strongly recommends applying security patches promptly and suggests mitigating risk by blocking required network protocols or restricting privileges until patches are applied.

CVE-2026-46788 is a high-severity vulnerability in Oracle WebCenter Content 14.1.2.0.0 that allows a high privileged attacker with network access via HTTP to compromise the product. Exploitation requires human interaction from a user other than the attacker and can lead to complete takeover of Oracle WebCenter Content. The vulnerability also has the potential to impact additional Oracle products due to scope change. The CVSS 3.1 base score is 8.4, indicating high confidentiality, integrity, and availability impacts.