What is the CVSS score of EUVD-2026-46880?

EUVD-2026-46880 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of Oracle WebCenter Content are affected by EUVD-2026-46880?

Oracle WebCenter Content: Imaging (versions 12.2.1.4.0 and 14.1.2.0.0) in Oracle Fusion Middleware contains a vulnerability allowing authenticated users to fully compromise the service and perform…

How to fix or mitigate EUVD-2026-46880?

Within 24 hours: identify all systems running Oracle WebCenter Content: Imaging versions 12.2.1.4.0 or 14.1.2.0.0 and inventory all authenticated users with access to these instances. Within 7 days: conduct comprehensive access reviews, reset credentials for all Imaging service accounts, enable detailed audit logging to detect unauthorized access, and review network access controls restricting who can reach the Imaging service. Within 30 days: implement network segmentation and IP whitelisting to further restrict access, establish continuous monitoring for suspicious authentication patterns and bulk content access, maintain forensic-ready audit trails, and coordinate with Oracle on patch availability and deployment timelines.

Oracle WebCenter Content EUVD-2026-46880

| CVE-2026-60503 HIGH

Improper Access Control (CWE-284)

2026-07-21 secalert_us@oracle.com

GHSA-m4vj-89cf-xvv8

Authentication Bypass Oracle Webcenter Content

8.8

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Network HTTP reachability with low complexity and no interaction, but a valid low-privilege login is required (PR:L), yielding full takeover so C/I/A all High.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (oracle).

CVSS VectorVendor: oracle

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 04:21 vuln.today

CVE Published

Jul 21, 2026 - 22:17 nvd

HIGH 8.8

DescriptionCVE.org

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in takeover of WebCenter Content: Imaging. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

AnalysisAI

Account takeover in Oracle WebCenter Content: Imaging (Core component of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0 lets a low-privileged, authenticated attacker with network HTTP access fully compromise the Imaging service. Rated CVSS 8.8 with high confidentiality, integrity, and availability impact, the flaw is described by Oracle as 'easily exploitable' and results in complete takeover of the product. No public exploit identified at time of analysis, and it is not on CISA KEV.

Technical ContextAI

WebCenter Content: Imaging is the document-imaging and capture module of Oracle Fusion Middleware's WebCenter Content platform, used to ingest, index, store, and route scanned documents and invoices, typically fronted by a Java/WebLogic HTTP application tier. The vulnerable 'Core' component is reachable over HTTP by any authenticated user, and successful exploitation yields full control of the Imaging application. Oracle did not assign a CWE (CWE: N/A) and, per its standard Critical Patch Update practice, withheld root-cause detail, so the specific weakness class (e.g. deserialization, injection, or access-control flaw) cannot be confirmed from the available data despite the vendor-supplied 'Information Disclosure' tag.

RemediationAI

Apply the fixes delivered in the Oracle Critical Patch Update of July 2026 (https://www.oracle.com/security-alerts/cpujul2026.html) for the affected WebCenter Content 12.2.1.4.0 and 14.1.2.0.0 stacks; Oracle ships these as CPU patches rather than a single renamed release, so the exact patched build must be taken from the CPU patch matrix for your version - no standalone fixed version number was provided in this data, so do not assume one. Until the CPU is applied, reduce exposure by restricting network access to the Imaging HTTP endpoints to trusted management networks or via a reverse proxy/WAF allowlist (trade-off: may block legitimate remote or integration users), and tighten account provisioning so that low-privilege Imaging accounts are minimized and closely monitored, since PR:L means the attack requires a valid login (trade-off: does not remove the flaw, only shrinks the attacker pool). Because Oracle does not publish workarounds outside the CPU, patching is the only vendor-supported remediation; the controls above are compensating measures only.