WebCenter Content vulnerabilities

110 known vulnerabilities in WebCenter Content from Oracle. 110 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  Oracle WebCenter Content: Cross-Site Request Forgery

  CVE-2026-60643Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 7.6 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60642Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 7.6 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60641Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.3 High severity

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

  CVE-2026-60640Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network a

• 8.8 High severity

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

  CVE-2026-60639Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.8 High severity

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

  CVE-2026-60638Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.8 High severity

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

  CVE-2026-60637Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.8 High severity

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

  CVE-2026-60636Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.8 High severity

  Oracle WebCenter Content: Improper Neutralization of Input During Web Page Generation

  CVE-2026-60635Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.8 High severity

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

  CVE-2026-60634Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.8 High severity

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component…

  CVE-2026-60633Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 9.3 Critical severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60632Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 9.3 Critical severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60631Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 8.2 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60525Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network ac

• 8.7 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60523Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 7.6 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60522Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 8.8 High severity

  WebCenter Content: Imaging: Improper Access Control

  CVE-2026-60503Jul 21, 2026Oracle

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via H

• 7.2 High severity

  WebCenter Content: Imaging: Improper Access Control

  CVE-2026-60502Jul 21, 2026Oracle

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via

• 8.8 High severity

  WebCenter Content: Imaging: Improper Access Control

  CVE-2026-60472Jul 21, 2026Oracle

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via H

• 8.3 High severity

  WebCenter Content: Imaging: Improper Access Control

  CVE-2026-60471Jul 21, 2026Oracle

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the phy

• 8.7 High severity

  WebCenter Content: Imaging: Improper Access Control

  CVE-2026-60470Jul 21, 2026Oracle

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via H

• 8.7 High severity

  WebCenter Content: Imaging: Improper Access Control

  CVE-2026-60469Jul 21, 2026Oracle

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via H

• 7.1 High severity

  WebCenter Content: Imaging: Improper Access Control

  CVE-2026-60468Jul 21, 2026Oracle

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via H

• 7.5 High severity

  WebCenter Content: Imaging: URL Redirection to Untrusted Site

  CVE-2026-60467Jul 21, 2026Oracle

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access vi

• 7.2 High severity

  WebCenter Content: Imaging: Improper Access Control

  CVE-2026-60466Jul 21, 2026Oracle

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via

• 8.8 High severity

  WebCenter Content: Imaging: Improper Access Control

  CVE-2026-60465Jul 21, 2026Oracle

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T

• 8.8 High severity

  WebCenter Content: Imaging: Improper Authentication

  CVE-2026-60464Jul 21, 2026Oracle

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via H

• 9.8 Critical severity

  WebCenter Content: Imaging: Missing Authentication for Critical Functionality

  CVE-2026-60463Jul 21, 2026Oracle

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via

• 8.1 High severity

  Oracle WebCenter Content: Missing Authentication for Critical Functionality

  CVE-2026-60462Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network a

• 8.5 High severity

  WebCenter Content: Imaging: Improper Access Control

  CVE-2026-60452Jul 21, 2026Oracle

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via H

• 7.1 High severity

  WebCenter Content: Imaging: Improper Access Control

  CVE-2026-60451Jul 21, 2026Oracle

  Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via H

• 8.1 High severity

  Oracle WebCenter Content: Missing Authentication for Critical Functionality

  CVE-2026-60450Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network a

• 7.1 High severity

  Oracle WebCenter Content: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-60449Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to th

• 8.7 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60448Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network a

• 8.5 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60444Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 8.7 High severity

  Oracle WebCenter Content: Improper Access Control

  CVE-2026-60443Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 9.8 Critical severity

  Oracle WebCenter Content: Missing Authentication for Critical Functionality

  CVE-2026-60435Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc

• 7.2 High severity

  Oracle WebCenter Content: Missing Authentication for Critical Functionality

  CVE-2026-60335Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network acc

• 8.8 High severity

  Oracle WebCenter Content: Missing Authentication for Critical Functionality

  CVE-2026-60334Jul 21, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce

• 9.8 Critical severity

  Oracle WebCenter Content: Missing Authentication for Critical Functionality

  CVE-2026-46813Jun 17, 2026Oracle

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc