CVE-2026-46788

Undergoing Analysis Undergoing Analysis - In Progress

Oracle WebCenter Content Remote Code Execution

Publication date: 2026-06-17

Last updated on: 2026-06-19

Assigner: Oracle

Description

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Content. CVSS 3.1 Base Score 8.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-17

Last Modified

2026-06-19

Generated

2026-07-08

AI Q&A

2026-06-17

EPSS Evaluated

2026-07-06

NVD

CVE-2026-46788

EUVD

EUVD-2026-37306

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	webcenter_content	14.1.2.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Oracle WebCenter Content product, specifically version 14.1.2.0.0. It allows a highly privileged attacker with network access via HTTP to compromise the system. The attack requires human interaction from someone other than the attacker. The vulnerability can lead to a complete takeover of Oracle WebCenter Content and may also affect other related products.

Impact Analysis

Successful exploitation of this vulnerability can result in a full compromise of Oracle WebCenter Content, impacting confidentiality, integrity, and availability of the system. This means sensitive data could be exposed or altered, and the availability of the service could be disrupted. Additionally, because the scope of the attack can extend beyond Oracle WebCenter Content, other connected products may also be significantly impacted.

Compliance Impact

This vulnerability allows a high privileged attacker to compromise Oracle WebCenter Content, potentially leading to a takeover of the system with significant impacts on confidentiality, integrity, and availability.

Such a compromise could result in unauthorized access to sensitive data, which may affect compliance with data protection regulations like GDPR and HIPAA that require safeguarding personal and health information.

However, the provided information does not explicitly state the direct impact on compliance with these standards.

Hi! I’m here to help you understand CVE-2026-46788. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70