What is the CVSS score of EUVD-2026-47003?

EUVD-2026-47003 has a CVSS 3.1 base score of 10.0 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of Oracle WebCenter Content are affected by EUVD-2026-47003?

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 face a critical remote-access vulnerability enabling attackers to seize complete control without authentication or user interaction, with…

How to fix or mitigate EUVD-2026-47003?

Within 24 hours: identify and inventory all Oracle WebCenter Content instances running versions 12.2.1.4.0 or 14.1.2.0.0; implement emergency network isolation by restricting HTTP/HTTPS access via firewall rules to authorized administrators only; consider offline deployment if business operations permit. Within 7 days: conduct comprehensive assessment of systems dependent on or connected to affected WebCenter Content instances; review access logs for indicators of compromise; establish monitoring for authentication anomalies and file system changes; subscribe to Oracle security advisories for patch status updates. Within 30 days: apply vendor-released patch immediately upon availability, validate successful installation, carefully restore network access with enhanced monitoring, and implement lasting network segmentation between WebCenter Content and critical business systems.

Oracle WebCenter Content EUVD-2026-47003

| CVE-2026-60644 CRITICAL

Missing Authentication for Critical Function (CWE-306)

2026-07-21 secalert_us@oracle.com

GHSA-5jm3-cwpg-c375

Authentication Bypass Oracle Webcenter Content

10.0

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

10.0 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

vuln.today AI

10.0 CRITICAL

Oracle confirms unauthenticated HTTP-reachable full takeover with cross-product impact, so AV:N/AC:L/PR:N/UI:N, scope change S:C, and full C:H/I:H/A:H.

3.1 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (oracle).

CVSS VectorVendor: oracle

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 04:23 vuln.today

CVE Published

Jul 21, 2026 - 22:18 nvd

CRITICAL 10.0

DescriptionCVE.org

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web Content Management). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. While the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

AnalysisAI

Full takeover of Oracle WebCenter Content (Fusion Middleware 12.2.1.4.0 and 14.1.2.0.0) is achievable by an unauthenticated remote attacker over HTTP, requiring no user interaction. The scope-changing flaw (CVSS 3.1 base 10.0) lets attackers compromise the Web Content Management component and pivot to impact adjacent Oracle products. No public exploit identified at time of analysis, but the maximum severity and trivial exploitability make this a top-priority patch from the July 2026 Oracle Critical Patch Update.

Technical ContextAI

Oracle WebCenter Content is an enterprise content management (ECM) platform within Oracle Fusion Middleware, used to store, manage, and deliver digital assets and web content, typically deployed on WebLogic Server. The vulnerable component is Web Content Management, exposed over HTTP. Oracle did not assign a CWE (listed as N/A) and, per its standard CPU disclosure practice, withholds root-cause detail; however, the AV:N/AC:L/PR:N/UI:N vector combined with a full-takeover impact and scope change is characteristic of authentication-bypass or unauthenticated remote-code-execution/injection classes common to WebCenter/WebLogic (e.g. deserialization or SSRF/path-based flaws). The scope change (S:C) indicates the vulnerable component can affect resources beyond its own security authority, consistent with a WebLogic-hosted service reaching underlying OS or other Fusion Middleware components.

RemediationAI

Apply the fixes from the Oracle July 2026 Critical Patch Update immediately; the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html is the source for the exact patch bundle for versions 12.2.1.4.0 and 14.1.2.0.0 (Patch available per vendor advisory - no standalone fixed build number was provided in the input, so obtain the specific patch ID from the CPU matrix). Because the flaw is unauthenticated and network-reachable over HTTP, until patching is complete restrict network exposure by placing WebCenter Content behind a VPN or IP allow-list, blocking direct internet access to the content server HTTP/HTTPS ports, and inspecting or filtering requests to the Web Content Management endpoints at a WAF or reverse proxy - accepting that these controls may disrupt legitimate external content delivery and remote author access. Given the scope change, also review and harden the trust boundary between WebCenter Content and any co-hosted Fusion Middleware/WebLogic components to limit lateral impact, and audit logs for anomalous unauthenticated HTTP activity.