CVE-2026-87370
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with HTTP network access can, with difficulty and requiring user interaction, exploit the flaw; the attack may impact additional products (scope change) and result in unauthorized access to critical data and its update, insert or delete.
Risk Assessment
Confidentiality and integrity of data in WebCenter Content and potentially in related products may be compromised, additionally requiring user interaction to be induced.
Recommendation
Update WebCenter Content to the Oracle-fixed version and train users to recognize social engineering attempts.
Other vulnerabilities in Oracle WebCenter Content
See all- CVE-2026-87400Medium
Vulnerability in the Content Server component of Oracle WebCenter Content version 14.1.2.0.0. A difficult-to-exploit HTTP attack requiring user interaction can lead to unauthorized access to critical data and modification of some data, and due to scope change may impact additional products.
- CVE-2017-3625High
Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction and can lead to unauthorized access to critical data.
- CVE-2026-91495Critical
Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can take over Oracle WebCenter Content. CVSS 9.8.
- CVE-2026-60905Critical
Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by unauthenticated attacker with network access via HTTP, requiring user interaction. Allows unauthorized modification, full data access, and partial denial of service. CVSS score 9.6.
- CVE-2026-60663Critical
Vulnerability in Oracle WebCenter Content (component: Web Content Management). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by a low privileged attacker with network access via HTTP. Attacks may impact additional products (scope change). Successful attack can lead to full system takeover.
- CVE-2026-60649Critical
Vulnerability in Oracle WebCenter Content (component: Web Content Management). Affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker via HTTP can access and modify critical data.
- CVE-2026-60644Critical
Vulnerability in Oracle WebCenter Content (Web Content Management component) allows unauthenticated attacker via HTTP to take over the system, with impact on other products (scope change). CVSS 10.0.
- CVE-2026-60632Critical
Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker via HTTP to unauthorized create, delete, or modify critical data and gain full access to it. User interaction is required, and the attack may impact additional products.
- CVE-2026-60631Critical
Vulnerability in Oracle WebCenter Content (Oracle Fusion Middleware) in the Content Server component. Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by an unauthenticated attacker with network access via HTTP, but requires human interaction. May impact additional products (scope change). Can lead to unauthorized creation, deletion, or modification of critical data and unauthorized access to all data. CVSS 9.3.
- CVE-2026-60435Critical
Vulnerability in Oracle WebCenter Content (Content Server component) allows unauthenticated attacker via HTTP to take over the system. CVSS 9.8.
Original NVD description (English source)
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Content accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Content accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS