CVE-2026-87392
MediumCVSS 6.5Summary
Vulnerability in WebCenter Content: Imaging (Core component) affecting version 14.1.2.0.0. A low-privileged attacker with SOAP network access can gain unauthorized creation, deletion or modification of critical data.
Risk Assessment
A low-privileged attacker can modify or delete critical data in the imaging system, compromising the integrity of organizational documents.
Recommendation
Apply the Oracle Critical Patch Update for WebCenter Content: Imaging 14.1.2.0.0 and restrict access to SOAP interfaces.
Other vulnerabilities in Oracle WebCenter Content: Imaging
See all- CVE-2026-87391Medium
Vulnerability in WebCenter Content: Imaging (Core component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A high-privileged attacker logged into the infrastructure can, with user interaction, gain unauthorized access to critical data or all product data, with possible impact on other products.
- CVE-2026-60463Critical
Vulnerability in WebCenter Content: Imaging (Core component) allows unauthenticated attacker via T3/IIOP to take over the system. CVSS 9.8.
Original NVD description (English source)
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all WebCenter Content: Imaging accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS