Oracle WebCenter Content vulnerabilities

94 known vulnerabilities in Oracle WebCenter Content from Oracle. 94 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Oracle WebCenter Content: Missing Authentication for Critical Functionality

  CVE-2026-60644Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with net

• 8.0 High severity

  Oracle WebCenter Content: Cross-Site Request Forgery

  CVE-2026-60643Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 7.6 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60642Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 7.6 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60641Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.3 High severity

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

  CVE-2026-60640Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network a

• 8.8 High severity

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

  CVE-2026-60639Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.8 High severity

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

  CVE-2026-60638Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.8 High severity

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

  CVE-2026-60637Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.8 High severity

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

  CVE-2026-60636Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.8 High severity

  Oracle WebCenter Content: Improper Neutralization of Input During Web Page Generation

  CVE-2026-60635Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.8 High severity

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

  CVE-2026-60634Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.8 High severity

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

  CVE-2026-60633Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 9.3 Critical severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60632Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 9.3 Critical severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60631Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.2 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60525Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network ac

• 8.7 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60523Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 7.6 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60522Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 8.1 High severity

  Oracle WebCenter Content: Missing Authentication for Critical Functionality

  CVE-2026-60462Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network a

• 8.1 High severity

  Oracle WebCenter Content: Missing Authentication for Critical Functionality

  CVE-2026-60450Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network a

• 7.1 High severity

  Oracle WebCenter Content: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-60449Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to th

• 8.7 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60448Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network a

• 8.5 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60444Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 8.7 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60443Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 9.8 Critical severity

  Oracle WebCenter Content: Missing Authentication for Critical Functionality

  CVE-2026-60435Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 7.2 High severity

  Oracle WebCenter Content: Missing Authentication for Critical Functionality

  CVE-2026-60335Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network acc

• 8.8 High severity

  Oracle WebCenter Content: Missing Authentication for Critical Functionality

  CVE-2026-60334Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 9.8 Critical severity

  Oracle WebCenter Content: Missing Authentication for Critical Functionality

  CVE-2026-46813Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.7 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-46808Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to

• 8.2 High severity

  Oracle WebCenter Content: URL Redirection to Untrusted Site

  CVE-2026-46806Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS

• 9.3 Critical severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-46805Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t

• 8.7 High severity

  Oracle WebCenter Content: Improper Privilege Management

  CVE-2026-46804Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to

• 9.3 Critical severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-46795Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t

• 7.5 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-46791Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t

• 9.6 Critical severity

  Oracle WebCenter Content: Missing Authentication for Critical Functionality

  CVE-2026-46789Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t

• 8.4 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-46788Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t

• 8.0 High severity

  Oracle WebCenter Content: Cross-Site Request Forgery

  CVE-2026-46787Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP

• 9.6 Critical severity

  Oracle WebCenter Content: Cross-Site Request Forgery

  CVE-2026-46786Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t

• 9.3 Critical severity

  Oracle WebCenter Content: Cross-Site Request Forgery

  CVE-2026-46785Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t

• 9.1 Critical severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-46777Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 9.8 Critical severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-46766Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc