PatchSiren cyber security CVE debrief
CVE-2026-60452 Oracle Corporation CVE debrief
The CVE-2026-60452 vulnerability is a highly critical issue in Oracle Webcenter Content: Imaging, affecting versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability allows low-privileged attackers with network access via HTTP to compromise the system, potentially impacting additional products and allowing unauthorized access to critical data or complete access to all Webcenter Content: Imaging accessible data as well as unauthorized update, insert or delete access to some of Webcenter Content: Imaging accessible data. The CVSS score for this vulnerability is 8.5, indicating a high severity level. Organizations should prioritize patching this vulnerability to prevent potential unauthorized access and data breaches. The CVE record was published on 2026-07-21T22:17:47.747Z and has not been modified since then.
- Vendor
- Oracle Corporation
- Product
- WebCenter Content: Imaging
- CVSS
- HIGH 8.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-07-21
- Original CVE updated
- 2026-07-28
- Advisory published
- 2026-07-21
- Advisory updated
- 2026-07-28
Who should care
Organizations using Oracle Webcenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0 should prioritize patching this vulnerability to prevent potential unauthorized access and data breaches. This includes operators, platform administrators, vulnerability management teams, and security teams who are responsible for ensuring the security and integrity of their systems.
Technical summary
The CVE-2026-60452 vulnerability is a highly critical issue in Oracle Webcenter Content: Imaging, with a CVSS score of 8.5. It allows low-privileged attackers with network access via HTTP to compromise the system, potentially impacting additional products and allowing unauthorized access to critical data or complete access to all Webcenter Content: Imaging accessible data as well as unauthorized update, insert or delete access to some of Webcenter Content: Imaging accessible data. The vulnerability affects Oracle Webcenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. To mitigate this vulnerability, organizations should apply vendor patches or updates, restrict network access to Webcenter Content: Imaging, and monitor for suspicious activity.
Defensive priority
Oracle Webcenter Content vulnerability allowing unauthorized access
Recommended defensive actions
- Apply vendor patches or updates
- Restrict network access to Webcenter Content: Imaging
- Monitor for suspicious activity
- Implement compensating controls
- Conduct regular vulnerability assessments
- Review and update incident response plans
- Perform thorough vulnerability scans
Evidence notes
The CVE-2026-60452 vulnerability affects Oracle Webcenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0, allowing low-privileged attackers with network access via HTTP to compromise the system, potentially impacting additional products and allowing unauthorized access to critical data or complete access to all Webcenter Content: Imaging accessible data as well as unauthorized update, insert or delete access to some of Webcenter Content: Imaging accessible data.
Official resources
-
CVE-2026-60452 CVE record
CVE.org
-
CVE-2026-60452 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Vendor Advisory
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-21T22:17:47.747Z and has not been modified since then.