CVE-2026-60632 in WebCenter Content
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Content accessible data as well as unauthorized access to critical data or complete access to all Oracle WebCenter Content accessible data. CVSS 3.1 Base Score 9.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N).
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability exists within Oracle WebCenter Content, a component of Oracle Fusion Middleware that serves as a comprehensive content management platform. The affected versions 12.2.1.4.0 and 14.1.2.0.0 represent critical security gaps in the Content Server component that expose organizations to significant risk. The vulnerability's classification as easily exploitable indicates that attackers can leverage standard network-based attack vectors without requiring specialized tools or extensive technical knowledge, making it particularly dangerous for organizations with exposed web applications.
The technical flaw manifests through an authentication bypass mechanism that operates over HTTP protocols, allowing unauthenticated attackers to gain unauthorized access to the content management system. This represents a fundamental breakdown in the application's security architecture where proper authentication controls fail to validate user credentials before granting access to sensitive resources. The vulnerability specifically impacts the Content Server component which handles document storage, retrieval, and management operations within Oracle WebCenter Content environments.
Operational impact assessment reveals severe consequences for organizations utilizing affected versions of Oracle WebCenter Content. Attackers can achieve unauthorized creation, deletion, or modification access to critical data within the system, potentially compromising entire content repositories. The scope change aspect indicates that successful exploitation may extend beyond the primary target to impact additional Oracle Fusion Middleware products within the same ecosystem, creating cascading security implications. The CVSS 3.1 base score of 9.3 reflects the high severity nature of this vulnerability, with both confidentiality and integrity impacts rated as high, indicating potential for substantial data compromise and system integrity violations.
The requirement for human interaction from individuals other than the attacker suggests that social engineering or targeted user engagement may be necessary to initiate exploitation, though this does not diminish the overall risk level. This vulnerability aligns with CWE-287 which addresses improper authentication scenarios, and maps to ATT&CK technique T1190 for exploit public-facing application, emphasizing the network-based attack surface exposure. Organizations should prioritize immediate patching of affected systems, implement network segmentation controls, and establish robust monitoring procedures to detect potential exploitation attempts. The combination of high confidentiality and integrity impacts with low access complexity creates an environment where unauthorized data access and manipulation can occur with minimal effort from threat actors, making this vulnerability particularly concerning for enterprises relying on Oracle WebCenter Content for sensitive document management operations.
Additional mitigations include implementing strict firewall rules to restrict HTTP access to the Content Server, deploying web application firewalls to monitor and filter malicious traffic patterns, and conducting comprehensive security assessments of all connected systems to identify potential lateral movement paths. The vulnerability demonstrates the critical importance of maintaining current security patches and implementing defense-in-depth strategies to protect enterprise content management infrastructure from unauthorized access attempts.