Threats Tagged 'cve-2026-46799'

CVE-2026-46799 is a critical vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to fully compromise the product, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products. Oracle strongly recommends applying the provided patches promptly to mitigate the risk. No specific patch version for WebCenter Sites is explicitly detailed in the advisory content, so users should consult the official patch availability documentation linked by Oracle. Until patches are applied, risk reduction may be possible by blocking required network protocols or restricting privileges, though these may impact functionality.

CVE-2026-46788 is a high-severity vulnerability in Oracle WebCenter Content 14.1.2.0.0 that allows a high privileged attacker with network access via HTTP to compromise the product. Exploitation requires human interaction from a user other than the attacker and can lead to complete takeover of Oracle WebCenter Content. The vulnerability also has the potential to impact additional Oracle products due to scope change. The CVSS 3.1 base score is 8.4, indicating high confidentiality, integrity, and availability impacts.