CVE-2026-60465 Oracle Corporation CVE debrief

Who should care

Organizations using Oracle Fusion Middleware's WebCenter Content: Imaging product, version 12.2.1.4.0 and 14.1.2.0.0, should prioritize patching this vulnerability. Security teams and administrators responsible for WebCenter Content: Imaging deployments should review the official advisory and take immediate action to protect against potential attacks.

Technical summary

The vulnerability is located in the Core component of WebCenter Content: Imaging. It has a CVSS score of 8.8 and a vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability allows a low-privileged attacker with network access via T3, IIOP to compromise WebCenter Content: Imaging. Successful attacks can result in takeover of WebCenter Content: Imaging. Oracle has provided patches for this vulnerability, which should be applied as soon as possible.

Defensive priority

High priority due to the high CVSS score and potential for takeover.

Recommended defensive actions

• Apply patches provided by Oracle
• Restrict network access to WebCenter Content: Imaging
• Monitor for suspicious activity
• Implement compensating controls
• Inventory and verify affected systems
• Review relevant monitoring, detection, and logs for exposed assets
• Track exceptions and retest remediated assets

Evidence notes

The CVE record was published on 2026-07-21T22:17:48.963Z and last modified on 2026-07-25T05:16:38.450Z. The NVD entry is currently Undergoing Analysis. Oracle Fusion Middleware's WebCenter Content: Imaging product is affected, with versions 12.2.1.4.0 and 14.1.2.0.0 being vulnerable. The vulnerability is located in the Core component and has a CVSS score of 8.8. Successful attacks can result in takeover of WebCenter Content: Imaging. The vendor has provided patches for this vulnerability.

Official resources