CVE-2026-60552 in WebCenter Sites
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. While the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Sites. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability resides within Oracle WebCenter Sites, a component of Oracle Fusion Middleware that serves as a web content management platform. The affected versions 12.2.1.4.0 and 14.1.2.0.0 represent critical security gaps that enable low-privileged attackers to execute successful exploitation through network-based HTTP connections. The vulnerability's classification as easily exploitable indicates that the attack surface requires minimal specialized knowledge or resources, making it particularly dangerous for organizations relying on this platform for content management and digital experience delivery.
The technical flaw manifests as a privilege escalation vulnerability that allows attackers with minimal authentication credentials to gain unauthorized access to critical system functions. This weakness specifically targets the WebCenter Sites component's handling of HTTP requests and authorization mechanisms, potentially enabling attackers to bypass existing security controls. The CVSS 3.1 base score of 9.9 reflects the severity across all impact vectors including confidentiality, integrity, and availability, with a vector rating of AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H indicating network-based access with low attack complexity, limited privileges required, no user interaction needed, and catastrophic scope changes that can affect additional products beyond the primary target.
The operational impact extends far beyond the immediate compromise of Oracle WebCenter Sites, as evidenced by the scope change aspect that allows attacks to significantly impact additional products. This characteristic suggests that successful exploitation could enable attackers to leverage the compromised system as a foothold for broader network infiltration or to access dependent systems within the enterprise infrastructure. Organizations utilizing this platform may experience complete system takeover, data breaches, and potential disruption of critical business operations that rely on web content management services.
Security professionals should implement immediate mitigations including network segmentation to limit access to WebCenter Sites components, enforcing strict firewall rules to restrict HTTP traffic, and applying Oracle's security patches as soon as they become available. The vulnerability aligns with CWE-284 (Improper Access Control) and represents a significant concern under the MITRE ATT&CK framework where adversaries may leverage such weaknesses for initial access and privilege escalation. Organizations should also consider implementing additional monitoring controls to detect anomalous HTTP traffic patterns and unauthorized access attempts, as well as conducting comprehensive vulnerability assessments across all Oracle Fusion Middleware products to identify potential related vulnerabilities that could be exploited through similar attack vectors.