CVE-2026-87392
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Vulnerability in WebCenter Content: Imaging (Core component) affecting version 14.1.2.0.0. A low-privileged attacker with SOAP network access can gain unauthorized creation, deletion or modification of critical data.
Risk Assessment
A low-privileged attacker can modify or delete critical data in the imaging system, compromising the integrity of organizational documents.
Recommendation
Apply the Oracle Critical Patch Update for WebCenter Content: Imaging 14.1.2.0.0 and restrict access to SOAP interfaces.
Other vulnerabilities in Oracle WebCenter Content: Imaging
See all- CVE-2026-60463Critical
Vulnerability in WebCenter Content: Imaging (Core component) allows unauthenticated attacker via T3/IIOP to take over the system. CVSS 9.8.
- CVE-2026-87391Medium
Vulnerability in WebCenter Content: Imaging (Core component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A high-privileged attacker logged into the infrastructure can, with user interaction, gain unauthorized access to critical data or all product data, with possible impact on other products.
Original NVD description (English source)
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all WebCenter Content: Imaging accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS