What is the CVSS score of EUVD-2026-46862?

EUVD-2026-46862 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N. EPSS exploitation probability: 0.2%.

Which versions of Oracle WebCenter Content are affected by EUVD-2026-46862?

Oracle WebCenter Content: Imaging (versions 12.2.1.4.0 and 14.1.2.0.0) contains a flaw enabling low-privileged network attackers to read all Imaging-accessible data and modify portions of it,…

How to fix or mitigate EUVD-2026-46862?

Within 24 hours, identify all systems running Oracle WebCenter Content versions 12.2.1.4.0 or 14.1.2.0.0 and document which low-privileged accounts access WebCenter Imaging modules. Within 7 days, implement network-level compensating controls including firewall rules to restrict Imaging access to authenticated administrative networks, strict IP whitelisting for all WebCenter Imaging traffic, and comprehensive audit logging of all Imaging data read and write operations. Within 30 days, establish a timeline to upgrade to patched versions once Oracle releases the fix and conduct forensic analysis to identify any unauthorized data access or modification that may have occurred.

Oracle WebCenter Content EUVD-2026-46862

| CVE-2026-60468 HIGH

Improper Access Control (CWE-284)

2026-07-21 secalert_us@oracle.com

GHSA-j26g-vvh7-3rg4

Authentication Bypass Oracle Webcenter Content

7.1

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

7.1 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

vuln.today AI

7.1 HIGH

Network HTTP reachable with a low-privilege account and no interaction (AV:N/AC:L/PR:L/UI:N); full data read (C:H), partial modification (I:L), no availability impact (A:N).

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (oracle).

CVSS VectorVendor: oracle

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 04:14 vuln.today

CVE Published

Jul 21, 2026 - 22:17 nvd

HIGH 7.1

DescriptionCVE.org

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all WebCenter Content: Imaging accessible data as well as unauthorized update, insert or delete access to some of WebCenter Content: Imaging accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).

AnalysisAI

Unauthorized data access and partial data manipulation in Oracle WebCenter Content: Imaging (Fusion Middleware component: Core) lets a low-privileged, network-based attacker read all Imaging-accessible data and modify some of it over HTTP. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected, with a CVSS 3.1 base score of 7.1 driven by high confidentiality and low integrity impact. No public exploit identified at time of analysis and the flaw is not on CISA KEV; the Oracle-supplied 'Authentication Bypass' tag is somewhat at odds with the CVSS PR:L requirement and should be verified against the vendor advisory.

Technical ContextAI

WebCenter Content: Imaging is the imaging and document-capture module of Oracle Fusion Middleware's WebCenter Content platform, used to store, index and route scanned business documents (invoices, forms, records) and typically fronted by a Java/WebLogic HTTP application server. The affected 'Core' component handles the primary Imaging application logic exposed over HTTP. Oracle did not assign a CWE (CWE: N/A), but the CVSS profile (C:H/I:L, PR:L) combined with the vendor 'Authentication Bypass' tag is consistent with a broken access-control or authorization weakness (CWE-284/CWE-285 class), in which an authenticated low-privilege user reaches data and operations beyond their intended entitlement rather than a memory-safety or injection bug.

RemediationAI

Apply the fixes delivered in the Oracle Critical Patch Update of July 2026 (https://www.oracle.com/security-alerts/cpujul2026.html), which is the vendor advisory covering this CVE; the input does not specify an exact patched build number, so consult the CPU patch matrix for the correct patch for your 12.2.1.4.0 or 14.1.2.0.0 deployment - patch available per vendor advisory. Until patched, reduce exposure by restricting network reachability of the Imaging application: place it behind a VPN or internal-only network segment rather than exposing the HTTP endpoint to the internet, and tighten WebLogic/Imaging role and security-group assignments so low-privilege accounts cannot reach Imaging document stores (trade-off: may block legitimate remote or partner users). Increase authorization logging and monitor for anomalous cross-user document access as a detective control, and review/rotate Imaging user privileges given the low-privilege attack precondition.