CVE-2026-87392: Medium severity Oracle WebCenter Content: Imaging vulnerability
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all WebCenter Content: Imaging accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Deployments of Oracle WebCenter Content: Imaging version 14.1.2.0.0 are identified as affected. Exploitation requires network access to the SOAP interface and a low-privileged account.
What could an attacker do after successful exploitation?
An attacker could gain unauthorized ability to create, delete, or modify critical data, potentially affecting all data accessible to WebCenter Content: Imaging. The reported impact is integrity-only; no confidentiality or availability impact is specified.
Does exploitation require user interaction or elevated privileges?
No user interaction is required. The attacker must be authenticated with low privileges; no higher privilege requirement is indicated.