CVE-2026-46784: Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core)

Synopsis

This is an unauthenticated network-exploitable vulnerability in the Core component of Oracle WebCenter Content: Imaging, affecting versions 12.2.1.4.0 and 14.1.2.0.0. An attacker with HTTP access to the service needs no credentials and no victim interaction to exploit it. Successful exploitation gives the attacker full read access to all data the application can reach, plus the ability to create, modify, or delete critical content. HarborGuard tracks this advisory for patch availability and will make a patched-image rebuild available the moment Oracle publishes a fix.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the WebCenter Content: Imaging service over the network via HTTP; no local or physical access is needed, making any internet- or intranet-exposed instance a direct target.

• AuthenticationNot required

  No credentials of any kind are required; the vulnerable endpoint is fully accessible to unauthenticated requests.

• Victim interactionNot required

  The attacker can exploit this vulnerability entirely on their own without any action from a logged-in user or administrator.

• Attack complexityDetail

  The exploit is reliable and condition-free, with no race conditions or environmental dependencies the attacker must satisfy.

Blast Radius

• Reads all data accessible to the WebCenter Content: Imaging application, including stored documents, metadata, and any credentials or tokens the service holds.
• Creates new content or records within the imaging system, potentially injecting malicious documents or false records into business workflows.
• Modifies or deletes critical existing content, enabling data corruption, destruction of audit trails, or disruption of document-dependent business processes.