Description
Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all WebCenter Content: Imaging accessible data as well as unauthorized access to critical data or complete access to all WebCenter Content: Imaging accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).
Published: 2026-10-20
Score: 6.8 Medium
EPSS: n/a
KEV: No
Impact: Data Integrity Compromise
Action: Patch promptly
AI Analysis

Impact

A flaw in Oracle WebCenter Content: Imaging allows a low‑privileged attacker with network access through HTTP to perform unauthorized creation, deletion or modification of critical data, thereby affecting the confidentiality and integrity of all data exposed by the component. The vulnerability does not provide direct denial of service but enables a persistent threat from an external network source.

Affected Systems

Oracle Corporation WebCenter Content: Imaging version 14.1.2.0.0 is impacted. No information is available for other versions or products.

Risk and Exploitability

The CVSS 3.1 base score of 6.8 indicates moderate severity and the EPSS score is not available. The issue is not listed in the CISA KEV catalog. Attackers would need only basic network connectivity and low privileges on the target host; successful exploitation can lead to full read‑write access to all data managed by WebCenter Content: Imaging, but it does not grant arbitrary code execution or system compromise.

Generated by OpenCVE AI on October 21, 2026 at 07:57 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest Oracle WebCenter Content: Imaging patch that addresses the access control flaw
  • If a patch is not yet available, isolate the WebCenter Content: Imaging service behind a firewall and restrict inbound HTTP traffic to trusted hosts only
  • Implement comprehensive audit logging for create, delete, and modify operations and monitor for anomalous activity

Generated by OpenCVE AI on October 21, 2026 at 07:57 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 21 Oct 2026 08:15:00 +0000

Type Values Removed Values Added
Title Unauthorized Data Modification via HTTP in Oracle WebCenter Content: Imaging
Weaknesses CWE-284

Tue, 20 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
Description Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise WebCenter Content: Imaging. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all WebCenter Content: Imaging accessible data as well as unauthorized access to critical data or complete access to all WebCenter Content: Imaging accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).
First Time appeared Oracle
Oracle webcenter Content Imaging
CPEs cpe:2.3:a:oracle:webcenter_content__imaging:14.1.2.0.0:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle webcenter Content Imaging
References
Metrics cvssV3_1

{'score': 6.8, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N'}

Subscriptions

Oracle Webcenter Content Imaging
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2026-10-20T21:24:22.515Z

Reserved: 2026-09-08T21:49:12.415Z

Link: CVE-2026-87376

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-20T22:20:15.673

Modified: 2026-10-20T22:20:15.673

Link: CVE-2026-87376

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-21T08:00:07Z

Weaknesses