What is the CVSS score of CVE-2026-60464?

CVE-2026-60464 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of Webcenter Content are affected by CVE-2026-60464?

A critical vulnerability in Oracle WebCenter Content Imaging (versions 12.2.1.4.0 and 14.1.2.0.0) permits low-privileged network attackers to achieve full compromise of the Imaging component,…

How to fix or mitigate CVE-2026-60464?

Within 24 hours, identify all production and development systems running Oracle WebCenter Content Imaging versions 12.2.1.4.0 or 14.1.2.0.0 and document their network exposure and data sensitivity. Within 7 days, restrict network HTTP access to the Imaging component through firewall rules to authorized administrators only, enable request logging at the HTTP/application layer, and audit current user access privileges to disable unnecessary low-privilege accounts. Within 30 days, establish a vendor monitoring process for Oracle patch releases, plan upgrade or remediation strategy, and evaluate whether systems can be isolated or decommissioned pending patch availability.

Webcenter Content CVE-2026-60464

EUVD-2026-46858 HIGH

Improper Authentication (CWE-287)

2026-07-21 secalert_us@oracle.com

GHSA-rrrj-v82j-c7wv

Authentication Bypass Oracle Webcenter Content

8.8

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (oracle) · only source for this CVE.

CVSS VectorVendor: oracle

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 04:06 vuln.today

CVE Published

Jul 21, 2026 - 22:17 nvd

HIGH 8.8

DescriptionCVE.org

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in takeover of WebCenter Content: Imaging. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

AnalysisAI

Full compromise of Oracle WebCenter Content: Imaging (versions 12.2.1.4.0 and 14.1.2.0.0), a component of Oracle Fusion Middleware, is achievable by a low-privileged attacker with network HTTP access, per Oracle's July 2026 Critical Patch Update. Successful exploitation results in complete takeover of the Imaging component with high confidentiality, integrity, and availability impact (CVSS 3.1 8.8). No public exploit has been identified at time of analysis and it is not listed in CISA KEV.