What is the CVSS score of EUVD-2026-37451?

EUVD-2026-37451 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.5%.

Which versions of Oracle WebCenter Content are affected by EUVD-2026-37451?

Oracle WebCenter Content (Content Server) versions 12.2.1.4.0 and 14.1.2.0.0 contain a privilege escalation vulnerability that permits attackers with HTTP network access to achieve full system…

How to fix or mitigate EUVD-2026-37451?

Within 24 hours: Identify all systems running WebCenter Content 12.2.1.4.0 or 14.1.2.0.0 and assess network exposure. Within 7 days: Implement network segmentation to restrict HTTP access to affected systems, enable detailed audit logging, and restrict administrative access to authenticated networks only. Within 30 days: Develop a formal upgrade plan for implementation once Oracle releases a patch, evaluate alternative solutions, or determine acceptable risk tolerance with enhanced compensating controls.

Oracle WebCenter Content EUVD-2026-37451

| CVE-2026-35325 HIGH

Improper Access Control (CWE-284)

2026-06-16 oracle

Authentication Bypass Oracle Oracle Webcenter Content Oracle Corporation

8.8

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Oracle confirms network HTTP access with low privileges and no user interaction yields full product takeover, justifying AV:N/AC:L/PR:L/UI:N and C:H/I:H/A:H with unchanged scope.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (oracle).

CVSS VectorVendor: oracle

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 16, 2026 - 23:14 vuln.today

DescriptionCVE.org

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

AnalysisAI

Privilege escalation to full product takeover in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0 allows low-privileged attackers with HTTP network access to fully compromise the system. The CVSS 3.1 base score of 8.8 reflects high impact across confidentiality, integrity, and availability with low attack complexity. No public exploit identified at time of analysis and the CVE is not listed in CISA KEV.

Technical ContextAI

Oracle WebCenter Content is an enterprise content management platform within Oracle Fusion Middleware, used for document management, records management, and digital asset management. The flaw resides in the Content Server component, which handles HTTP-based content operations, user requests, and administrative functions. No CWE was assigned by Oracle, which is typical for Oracle Critical Patch Update advisories that disclose minimal technical detail; the root cause class (e.g., access control flaw, deserialization, injection) cannot be determined from the vendor advisory alone. CPE data confirms the affected product as cpe:2.3:a:oracle_corporation:oracle_webcenter_content covering supported Fusion Middleware releases.

RemediationAI

Apply the Oracle Critical Patch Update of June 2026 as documented at https://www.oracle.com/security-alerts/cspujun2026.html - Patch available per vendor advisory, though Oracle does not publish a discrete fixed sub-version number outside the CPU bundle, so administrators should apply the CPU patch corresponding to their installed 12.2.1.4.0 or 14.1.2.0.0 branch. Until patching is possible, restrict network access to the Content Server HTTP/HTTPS endpoints to trusted management networks only via firewall or reverse-proxy ACLs, and tighten authorization on low-privileged WebCenter accounts since the flaw requires only PR:L (consider disabling self-service account creation and auditing existing low-privilege users). These mitigations may break legitimate end-user document access workflows and integrations with downstream applications, so plan a maintenance window for the CPU patch rather than relying on network restrictions long-term.