CVE-2026-60443 in WebCenter Content
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Content accessible data as well as unauthorized access to critical data or complete access to all Oracle WebCenter Content accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N).
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability resides within Oracle WebCenter Content, a component of Oracle Fusion Middleware that serves as a comprehensive content management platform for enterprise organizations. The affected versions 12.2.1.4.0 and 14.1.2.0.0 represent critical security gaps in the Content Server component that enable malicious actors to exploit weaknesses in the system's authentication and authorization mechanisms. The vulnerability's classification as easily exploitable indicates that attackers require minimal technical expertise or resources to leverage this flaw effectively, making it particularly dangerous for organizations relying on this platform for content management operations.
The technical nature of this vulnerability involves a combination of network-based attack vectors through HTTP protocols combined with insufficient privilege controls that allow low-privileged users to perform unauthorized actions against the content repository. The CVSS 3.1 base score of 8.7 reflects the high severity of potential impacts, specifically targeting both confidentiality and integrity aspects of the system's data protection mechanisms. Attackers can potentially gain unauthorized access to create, delete, or modify critical data within Oracle WebCenter Content, while also achieving complete access to all accessible data through this vulnerability. The scope change aspect indicates that successful exploitation could extend beyond the immediate target system to affect additional products within the enterprise environment.
The requirement for human interaction from individuals other than the attacker suggests this vulnerability may involve social engineering components or require specific user actions such as clicking malicious links, opening infected documents, or performing certain administrative tasks that inadvertently trigger the exploit. This characteristic places organizations at greater risk as it requires security awareness training and user education alongside traditional technical controls to prevent successful exploitation attempts. The attack vector AV:N indicates network accessibility, meaning attackers can potentially exploit this vulnerability remotely without requiring physical access to the target systems.
Organizations should implement immediate mitigations including applying Oracle's security patches and updates to address the identified vulnerabilities in the affected versions. Network segmentation strategies should be employed to limit access to the WebCenter Content servers, while implementing strict access controls and monitoring mechanisms to detect unauthorized activities. The vulnerability's impact on both confidentiality and integrity aligns with CWE-284 (Improper Access Control) and CWE-310 (Cryptographic Issues) categories, representing fundamental security weaknesses that require comprehensive remediation approaches. Security teams must also consider ATT&CK framework implications related to privilege escalation and persistence techniques that attackers might employ following successful exploitation of this vulnerability.
Additional defensive measures include implementing web application firewalls to monitor HTTP traffic patterns, establishing robust logging and monitoring protocols for suspicious activities, and conducting regular security assessments to identify potential attack vectors. The high impact level of this vulnerability necessitates immediate attention from security operations teams, as it could enable attackers to compromise sensitive enterprise content and potentially use the platform as a stepping stone for broader network infiltration attempts. Organizations should also review their incident response procedures to ensure rapid detection and containment capabilities when such vulnerabilities are exploited in real-world scenarios.