CVE-2026-87377
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging version 14.1.2.0.0. A low-privileged attacker with network access via SOAP can create, delete or modify critical data and gain unauthorized access to it.
Risk Assessment
An attacker can compromise integrity and confidentiality of critical data in the document imaging system, potentially leading to faulty operations and information leakage.
Recommendation
Apply Oracle updates for WebCenter Content: Imaging 14.1.2.0.0 and restrict SOAP access to trusted clients.
Other vulnerabilities in WebCenter Content: Imaging
See all- CVE-2026-46784Critical
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system. The attacker can gain unauthorized access to critical data and has the ability to create, delete, or modify data.
- CVE-2026-46783Critical
Vulnerability in the WebCenter Content: Imaging product of Oracle, affecting versions 12.2.1.4.0 and 14.1.2.0.0. It allows easy exploitation by an unauthenticated attacker with network access via HTTP, potentially leading to takeover of WebCenter Content: Imaging.
- CVE-2026-87379Medium
Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via SOAP can gain unauthorized read access to a subset of data.
- CVE-2026-87378Medium
Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data.
- CVE-2026-87376Medium
Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging version 14.1.2.0.0. A low-privileged attacker with network access via HTTP can create, delete or modify critical data and gain unauthorized access to it.
- CVE-2026-87375Medium
Vulnerability in the Core component of Oracle Fusion Middleware WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data.
- CVE-2026-60503High
Vulnerability in WebCenter Content: Imaging (Core component) allows a low-privileged attacker to take over the system over the network via HTTP. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.
- CVE-2026-60472High
Vulnerability in Oracle Fusion Middleware's WebCenter Content: Imaging product (component: Core). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging.
- CVE-2026-60470High
Vulnerability in WebCenter Content: Imaging (component: Core) in Oracle Fusion Middleware. A low-privileged attacker via HTTP, with user interaction, can gain unauthorized access to critical data and the ability to create, delete, or modify it, affecting other products.
- CVE-2026-60469High
Vulnerability in WebCenter Content: Imaging (Fusion Middleware). Low-privileged attacker via HTTP can compromise data confidentiality and integrity, requiring user interaction, affecting other products.
Original NVD description (English source)
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via SOAP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all WebCenter Content: Imaging accessible data as well as unauthorized access to critical data or complete access to all WebCenter Content: Imaging accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

