Webcenter Content EUVD-2026-46858

A critical vulnerability in Oracle WebCenter Content Imaging (versions 12.2.1.4.0 and 14.1.2.0.0) permits low-privileged network attackers to achieve full compromise of the Imaging component, including unrestricted access to confidential imaging data and ability to modify or delete content. Organizations running these Fusion Middleware versions face immediate risk of data exfiltration and operational disruption.

Within 24 hours, identify all production and development systems running Oracle WebCenter Content Imaging versions 12.2.1.4.0 or 14.1.2.0.0 and document their network exposure and data sensitivity. Within 7 days, restrict network HTTP access to the Imaging component through firewall rules to authorized administrators only, enable request logging at the HTTP/application layer, and audit current user access privileges to disable unnecessary low-privilege accounts. Within 30 days, establish a vendor monitoring process for Oracle patch releases, plan upgrade or remediation strategy, and evaluate whether systems can be isolated or decommissioned pending patch availability.

No vendor-released patch identified at time of analysis. Network-level access restrictions to HTTP endpoints; limitation of Imaging component access to administrators only; enhanced authentication and access logging; isolation of affected systems from sensitive networks; monitoring for authentication anomalies and bulk data access patterns indicative of exploitation.