PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-60452 Oracle Corporation CVE debrief

The CVE-2026-60452 vulnerability is a highly critical issue in Oracle Webcenter Content: Imaging, affecting versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows low-privileged attackers with network access via HTTP to compromise the system, potentially impacting additional products and allowing unauthorized access to critical data or complete access to all Webcenter Content: Imaging accessible data as well as unauthorized update, insert or delete access to some of Webcenter Content: Imaging accessible data. The CVSS score for this vulnerability is 8.5, indicating a high severity level. Organizations should prioritize patching this vulnerability to prevent potential unauthorized access and data breaches. The CVE record was published on 2026-07-21T22:17:47.747Z and has not been modified since then.

Vendor
Oracle Corporation
Product
WebCenter Content: Imaging
CVSS
HIGH 8.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-21
Original CVE updated
2026-07-28
Advisory published
2026-07-21
Advisory updated
2026-07-28

Who should care

Organizations using Oracle Webcenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0 should prioritize patching this vulnerability to prevent potential unauthorized access and data breaches. This includes operators, platform administrators, vulnerability management teams, and security teams who are responsible for ensuring the security and integrity of their systems.

Technical summary

The CVE-2026-60452 vulnerability is a highly critical issue in Oracle Webcenter Content: Imaging, with a CVSS score of 8.5. It allows low-privileged attackers with network access via HTTP to compromise the system, potentially impacting additional products and allowing unauthorized access to critical data or complete access to all Webcenter Content: Imaging accessible data as well as unauthorized update, insert or delete access to some of Webcenter Content: Imaging accessible data. The vulnerability affects Oracle Webcenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. To mitigate this vulnerability, organizations should apply vendor patches or updates, restrict network access to Webcenter Content: Imaging, and monitor for suspicious activity.

Defensive priority

Oracle Webcenter Content vulnerability allowing unauthorized access

Recommended defensive actions

  • Apply vendor patches or updates
  • Restrict network access to Webcenter Content: Imaging
  • Monitor for suspicious activity
  • Implement compensating controls
  • Conduct regular vulnerability assessments
  • Review and update incident response plans
  • Perform thorough vulnerability scans

Evidence notes

The CVE-2026-60452 vulnerability affects Oracle Webcenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0, allowing low-privileged attackers with network access via HTTP to compromise the system, potentially impacting additional products and allowing unauthorized access to critical data or complete access to all Webcenter Content: Imaging accessible data as well as unauthorized update, insert or delete access to some of Webcenter Content: Imaging accessible data.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:47.747Z and has not been modified since then.