Unauthorized Access Vulnerability in Oracle WebCenter Content by Oracle
CVE-2026-60980

8.7HIGH

Key Information:

Vendor

Oracle
Status
Oracle Webcenter Content
Vendor
CVE Published:
18 August 2026

What is CVE-2026-60980?

A vulnerability found in Oracle WebCenter Content allows unauthenticated network attackers to exploit the system via HTTP. This flaw can lead to unauthorized creation, deletion, or modification of critical data within the Oracle WebCenter Content environment. The impact may extend beyond Oracle WebCenter Content, potentially affecting other interconnected systems, thereby increasing the risk of data breaches and unauthorized data access. Organizations using affected versions are advised to implement necessary mitigations and updates to secure their data effectively.

Affected Version(s)

Oracle WebCenter Content 12.2.1.4.0

Oracle WebCenter Content 14.1.2.0.0

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.