CVE-2026-60452 Oracle Corporation CVE debrief

Who should care

Organizations using Oracle Webcenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0 should prioritize patching this vulnerability to prevent potential unauthorized access and data breaches. This includes operators, platform administrators, vulnerability management teams, and security teams who are responsible for ensuring the security and integrity of their systems.

Technical summary

The CVE-2026-60452 vulnerability is a highly critical issue in Oracle Webcenter Content: Imaging, with a CVSS score of 8.5. It allows low-privileged attackers with network access via HTTP to compromise the system, potentially impacting additional products and allowing unauthorized access to critical data or complete access to all Webcenter Content: Imaging accessible data as well as unauthorized update, insert or delete access to some of Webcenter Content: Imaging accessible data. The vulnerability affects Oracle Webcenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. To mitigate this vulnerability, organizations should apply vendor patches or updates, restrict network access to Webcenter Content: Imaging, and monitor for suspicious activity.

Defensive priority

Oracle Webcenter Content vulnerability allowing unauthorized access

Recommended defensive actions

• Apply vendor patches or updates
• Restrict network access to Webcenter Content: Imaging
• Monitor for suspicious activity
• Implement compensating controls
• Conduct regular vulnerability assessments
• Review and update incident response plans
• Perform thorough vulnerability scans

Evidence notes

The CVE-2026-60452 vulnerability affects Oracle Webcenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0, allowing low-privileged attackers with network access via HTTP to compromise the system, potentially impacting additional products and allowing unauthorized access to critical data or complete access to all Webcenter Content: Imaging accessible data as well as unauthorized update, insert or delete access to some of Webcenter Content: Imaging accessible data.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.