CVE-2026-60471

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the WebCenter Content: Imaging executes to compromise WebCenter Content: Imaging. While the vulnerability is in WebCenter Content: Imaging, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of WebCenter Content: Imaging. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).

• CWE-284

• https://www.oracle.com/security-alerts/cpujul2026.htmlVendor Advisory

Published

Jul 21, 2026

Last Modified

Jul 28, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-60466Vulnerability in the WebCenter Content: Imaging product of O…7.2
• CVE-2026-60467Vulnerability in the WebCenter Content: Imaging product of O…7.5
• CVE-2026-60468Vulnerability in the WebCenter Content: Imaging product of O…7.1
• CVE-2026-60469Vulnerability in the WebCenter Content: Imaging product of O…8.7
• CVE-2026-6047LibreOffice can import documents in the OOXML format (DOCX).…5.4
• CVE-2026-60470Vulnerability in the WebCenter Content: Imaging product of O…8.7
• CVE-2026-60472Vulnerability in the WebCenter Content: Imaging product of O…8.8
• CVE-2026-6048The Flipbox Addon for Elementor plugin for WordPress is vuln…6.4
• CVE-2026-60489Vulnerability in the JD Edwards EnterpriseOne CRM Foundation…8.8
• CVE-2026-60490Vulnerability in the JD Edwards EnterpriseOne CRM Foundation…8.8
• CVE-2026-60491Vulnerability in the Oracle Advanced Inbound Telephony produ…6.3
• CVE-2026-60492Vulnerability in the JD Edwards EnterpriseOne HCM Foundation…7.1