WebCenter Content vulnerabilities

110 known vulnerabilities in WebCenter Content from Oracle. 110 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

110vulnerabilities

26critical

84high

0exploited

8.5average CVSS score

Latest first

8.7 High severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-46808Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
8.2 High severity
Oracle WebCenter Content: URL Redirection to Untrusted Site
CVE-2026-46806Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS
9.3 Critical severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-46805Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
8.7 High severity
Oracle WebCenter Content: Improper Privilege Management
CVE-2026-46804Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to
9.3 Critical severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-46795Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
7.5 High severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-46791Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
9.6 Critical severity
Oracle WebCenter Content: Missing Authentication for Critical Functionality
CVE-2026-46789Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
8.4 High severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-46788Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP t
8.0 High severity
Oracle WebCenter Content: Cross-Site Request Forgery
CVE-2026-46787Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP
9.6 Critical severity
Oracle WebCenter Content: Cross-Site Request Forgery
CVE-2026-46786Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
9.3 Critical severity
Oracle WebCenter Content: Cross-Site Request Forgery
CVE-2026-46785Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t
9.1 Critical severity
WebCenter Content: Imaging: Improper Access Control
CVE-2026-46784Jun 17, 2026Oracle
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via
9.8 Critical severity
WebCenter Content: Imaging: Missing Authentication for Critical Functionality
CVE-2026-46783Jun 17, 2026Oracle
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via
8.8 High severity
WebCenter Content: Imaging: Missing Authentication for Critical Functionality
CVE-2026-46780Jun 17, 2026Oracle
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via H
9.1 Critical severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-46777Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc
9.8 Critical severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-46766Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc
7.6 High severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-35327Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce
7.2 High severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-35326Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network acc
8.8 High severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-35325Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce
8.8 High severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-35324Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce
9.9 Critical severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-35323Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce
8.8 High severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-35322Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce
9.9 Critical severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-35321Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce
9.0 Critical severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-35320Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network a
9.8 Critical severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-35319Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc
8.8 High severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-35317Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce
9.9 Critical severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-35316Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce
8.8 High severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-35315Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network acce
9.8 Critical severity
Oracle WebCenter Content: Missing Authentication for Critical Functionality
CVE-2026-35286Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc
9.1 Critical severity
Oracle WebCenter Content: Improper Access Control
CVE-2026-35270Jun 17, 2026Oracle
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network acc