Threats Tagged 'cve-2026-46809'

CVE-2026-46809 is a critical vulnerability in Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or complete access to all data accessible through Oracle WebCenter Sites. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high confidentiality and integrity impacts without availability impact. Oracle has acknowledged the vulnerability in their June 2026 Critical Security Patch Update advisory but has not explicitly stated patch availability for these versions in the provided content. Oracle strongly recommends applying security patches promptly and suggests network-level mitigations until patches are applied.

CVE-2026-46788 is a high-severity vulnerability in Oracle WebCenter Content 14.1.2.0.0 that allows a high privileged attacker with network access via HTTP to compromise the product. Exploitation requires human interaction from a user other than the attacker and can lead to complete takeover of Oracle WebCenter Content. The vulnerability also has the potential to impact additional Oracle products due to scope change. The CVSS 3.1 base score is 8.4, indicating high confidentiality, integrity, and availability impacts.