What is the CVSS score of EUVD-2026-47000?

EUVD-2026-47000 has a CVSS 3.1 base score of 7.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L. EPSS exploitation probability: 0.3%.

Which versions of Oracle WebCenter Content are affected by EUVD-2026-47000?

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 contain a remote vulnerability allowing complete unauthorized access to stored data through social engineering.

How to fix or mitigate EUVD-2026-47000?

Within 24 hours: identify and inventory all systems running WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0; restrict network access to the Content Server component to essential personnel only and document business justification. Within 7 days: enable comprehensive access logging and establish real-time alerting for anomalous read activity; conduct mandatory security awareness training for all users with WebCenter Content access, emphasizing rejection of untrusted external content. Within 30 days: continuously monitor Oracle security advisories for patch availability; develop and test an upgrade plan to a patched version; evaluate operational necessity and consider deprovisioning if not business-critical.

Oracle WebCenter Content EUVD-2026-47000

| CVE-2026-60641 HIGH

Improper Access Control (CWE-284)

2026-07-21 secalert_us@oracle.com

GHSA-vwmj-x9c6-whq9

Authentication Bypass Denial Of Service Oracle Webcenter Content

7.6

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

7.6 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

vuln.today AI

7.6 HIGH

Network-delivered and unauthenticated (AV:N/PR:N) but requires a victim to interact (UI:R); high data disclosure with only limited integrity/availability impact matches Oracle's assessment.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (oracle).

CVSS VectorVendor: oracle

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 07:13 vuln.today

CVE Published

Jul 21, 2026 - 22:18 nvd

HIGH 7.6

DescriptionCVE.org

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Content accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Content accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebCenter Content. CVSS 3.1 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L).

AnalysisAI

Unauthorized data access and partial denial of service in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0 lets a remote, unauthenticated attacker compromise the platform after tricking a legitimate user into interacting with attacker-controlled content. Per Oracle's July 2026 Critical Patch Update, successful exploitation yields high confidentiality impact (complete read access to WebCenter Content data) plus limited integrity and availability damage. No public exploit has been identified at time of analysis and it is not listed in CISA KEV, though Oracle rates it easily exploitable.

Technical ContextAI

Oracle WebCenter Content is the enterprise content management (ECM) platform within Oracle Fusion Middleware, providing document management, imaging, and records management; the vulnerable component is the Content Server, the core repository and web-facing service that handles HTTP-based check-in, retrieval, and rendering of managed content. The CVSS vector (AV:N/UI:R) indicates a network-delivered attack that hinges on a victim's browser action, which is consistent with client-side injection classes such as reflected/stored cross-site scripting or request forgery against the Content Server web tier, though Oracle publishes no CWE (listed as N/A) and does not disclose the precise defect. The affected builds correspond to the 12.2.1.4.0 (12c) and 14.1.2.0.0 (14c) Fusion Middleware release trains.

RemediationAI

Apply the fixes delivered in the Oracle Critical Patch Update of July 2026 (https://www.oracle.com/security-alerts/cpujul2026.html), which is the vendor's designated remediation channel for both affected trains (12.2.1.4.0 and 14.1.2.0.0); Patch available per vendor advisory, though Oracle CPUs do not expose a discrete fixed product version, so identify the exact patch/bundle for your release from the CPU patch matrix and My Oracle Support. Because exploitation requires victim interaction over HTTP, interim compensating controls include placing the Content Server web tier behind a reverse proxy or WAF to filter malicious requests and responses, restricting Content Server access to trusted internal networks or VPN rather than public exposure, and enforcing strict content-security and anti-CSRF protections on the web tier; the trade-off is that WAF rules may block legitimate content operations and network restriction reduces external collaboration functionality. User-awareness measures (caution with unsolicited WebCenter links) further reduce the interaction-dependent attack surface but are not a substitute for the patch.