CVE-2026-60451 Oracle Corporation CVE debrief

Who should care

Users of Oracle Webcenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0 should be aware of this vulnerability and take necessary actions to protect their systems. This includes verifying affected versions, applying vendor patches or updates, and monitoring for suspicious activity. Security teams and vulnerability management teams should prioritize this vulnerability due to its high severity and potential impact on critical data and systems.

Technical summary

The CVE-2026-60451 vulnerability is an easily exploitable vulnerability in the Webcenter Content: Imaging product of Oracle Fusion Middleware. It allows low-privileged attackers with network access via HTTP to compromise Webcenter Content: Imaging, resulting in unauthorized access to critical data or complete access to all Webcenter Content: Imaging accessible data as well as unauthorized update, insert or delete access to some of Webcenter Content: Imaging accessible data. The vulnerability has a CVSS score of 7.1 and a CVSS severity of HIGH.

Defensive priority

Oracle Webcenter Content vulnerability allowing unauthorized access

Recommended defensive actions

• Inventory and verify affected Webcenter Content: Imaging versions
• Apply vendor patches or updates
• Monitor for suspicious activity
• Implement compensating controls
• Restrict network access to Webcenter Content: Imaging

Evidence notes

The CVE-2026-60451 vulnerability affects Oracle Webcenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0, allowing low-privileged attackers with network access via HTTP to compromise the system and gain unauthorized access to critical data or complete access to all Webcenter Content: Imaging accessible data. The vulnerability has a CVSS score of 7.1 and a CVSS severity of HIGH. Users should verify the affected versions and apply vendor patches or updates. Evidence is limited to public sources and may not reflect the full scope of affected systems or potential impacts.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.