EUVD-2026-106747
GHSA-5488-hwx7-w4h2
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Access control enforcement
MITRE ATT&CK
1 technique across 1 tactic: Defense Evasion The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | This is a genuinely serious but not top-tier-urgent vulnerability. The CVSS 3.1 base score of 7.5 with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H reflects a network-reachable flaw with full confidentiality, integrity, and availability impact - Oracle's own text describes 'takeover of Oracle WebCenter Content.' However, two signals temper the urgency: AC:H ('Difficult to exploit vulnerability' per Oracle) indicates the attacker must win a race condition or satisfy conditions outside their control, and PR:L means a valid low-privileged account is required, so this is not a pre-authentication drive-by. No EPSS score was provided in the input, so exploitation probability cannot be quantified. There is no CISA KEV listing and no public exploit identified at time of analysis, so there is no evidence of active exploitation or weaponization. CONFLICT TO NOTE: the input Tags label this 'Information Disclosure,' but the CVSS vector (C:H/I:H/A:H) and Oracle's 'takeover' language describe full compromise, not mere disclosure - treat the tag as inaccurate and the impact as full takeover. Net: a real patch priority for exposed WebCenter deployments given the full-takeover impact, but the AC:H + PR:L combination places it below unauthenticated, easily-exploited critical flaws in triage order. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 20, 2026
Takeover of Oracle WebCenter Content 12.2.1.4.0 and 14.1.2.0.0 is possible for authenticated low-privileged attackers with network access via HTTP, according to Oracle's October 2026 Critical Patch Update. The Content Portal Suite component flaw is rated CVSS 7.5 with high attack complexity and no user interaction, giving high confidentiality, integrity, and availability impact; it is serious but not top-tier urgent. No public exploit was identified at time of analysis, and no CISA KEV entry was provided.
RemediationAI
Patch available per vendor advisory: apply the Oracle Critical Patch Update October 2026 fix for WebCenter Content on 12.2.1.4.0 and 14.1.2.0.0; consult https://www.oracle.com/security-alerts/cpuoct2026.html for the exact patch identifiers because the input does not specify a patched version number. If patching must be delayed, restrict HTTP access to Content Portal Suite endpoints to trusted networks or users and enforce least privilege for WebCenter Content accounts, noting that network restrictions can break legitimate portal access and least-privilege changes require permission review. Monitor authenticated activity for anomalous behavior; this is detective, not preventive.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Oracle WebCenter Content is an enterprise content management platform within Oracle Fusion Middleware; the affected component is Content Portal Suite in versions 12.2.1.4.0 and 14.1.2.0.0. The CVSS 3.1 vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H describes a network-reachable flaw that requires a valid low-privileged account and is difficult to exploit, with no user interaction and full confidentiality, integrity, and availability impact. No CWE or CPE data was supplied, so the exact root-cause class and precise product identifiers cannot be confirmed from the provided intelligence; Oracle's advisory should be treated as authoritative. The 'Information Disclosure' tag is narrower than the CVSS impact, which indicates takeover-level consequences.
Know when the next one hits your stack
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (oracle) · only source for this CVE.
CVSS VectorVendor: oracle
DescriptionCVE.org
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
Executive ViewAI
Oracle WebCenter Content 12.2.1.4.0 and 14.1.2.0.0 are exposed to a high-severity Content Portal Suite flaw that could enable takeover of enterprise content and portal services, putting confidentiality, integrity, and availability at risk. No public exploit identified at time of analysis and no vendor-released patch identified at time of analysis, so leadership should manage this as a controlled exposure with access restrictions, monitoring, and upgrade planning. Business owners of these versions should confirm exposure and prioritize containment actions while Oracle advisory tracking continues.
No vendor-released patch identified at time of analysis; interim mitigations include restricting network access to WebCenter Content HTTP endpoints, segmenting affected systems, enforcing least privilege and reviewing accounts, enabling detailed logging and monitoring, deploying WAF rules, and disabling unused Content Portal Suite functionality.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Exploit-DB