CVE-2026-60471 Oracle Corporation CVE debrief

Who should care

Organizations using Oracle Fusion Middleware's WebCenter Content: Imaging product, particularly versions 12.2.1.4.0 and 14.1.2.0.0, should prioritize patching this vulnerability. Operators, platform administrators, vulnerability management teams, and security teams should review the vulnerability's impact on their environments and plan for mitigation.

Technical summary

The vulnerability is located in the Core component of WebCenter Content: Imaging and is difficult to exploit. It allows unauthenticated attackers with access to the physical communication segment attached to the hardware where WebCenter Content: Imaging executes to compromise the product. The vulnerability has a CVSS score of 8.3 and a vector of (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H). Oracle Fusion Middleware's WebCenter Content: Imaging product, particularly versions 12.2.1.4.0 and 14.1.2.0.0, is affected. Defenders should verify the scope of impact and review official advisories for patching guidance, considering compensating controls for exposed systems.

Defensive priority

High priority should be given to patching this vulnerability due to its high CVSS score and potential impact on affected systems.

Recommended defensive actions

• Apply the latest security patches provided by Oracle for WebCenter Content: Imaging.
• Restrict access to the physical communication segment attached to the hardware where WebCenter Content: Imaging executes.
• Monitor for any suspicious activity related to this vulnerability.
• Consider implementing compensating controls to mitigate potential impacts.
• Review and update asset inventories to ensure accurate tracking of affected systems.
• Plan for rollback or change windows if patching is not immediately feasible.
• Track exceptions and retest remediated assets to ensure vulnerability closure.

Evidence notes

The CVE record was published on 2026-07-21T22:17:49.640Z and last modified on 2026-07-25T05:16:39.190Z. The NVD entry is currently Undergoing Analysis. Oracle Fusion Middleware's WebCenter Content: Imaging product is affected, particularly versions 12.2.1.4.0 and 14.1.2.0.0. Defenders should verify the scope of impact and review official advisories for patching guidance.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.