CVE-2026-87375 Oracle Corporation CVE debrief

Who should care

Defenders responsible for Oracle Fusion Middleware's WebCenter Content: Imaging systems should assess exposure and apply necessary patches or mitigations. Relevant roles include those responsible for WebCenter Content: Imaging systems, vulnerability management, and security teams. They should review and apply Oracle's security patches, restrict network access, and monitor systems for unauthorized access attempts.

Why it matters

CVE-2026-87375 is a medium-severity vulnerability in Oracle Fusion Middleware's WebCenter Content: Imaging product. Defenders should care because it allows low-privileged attackers to gain unauthorized access to critical data. Relevant roles include those responsible for WebCenter Content: Imaging systems. Supported consequences include potential data breaches and the need for patch verification and application. Evidence limits include reliance on CVE and NVD records.

• Potential unauthorized access to sensitive data.
• Possible complete access to all WebCenter Content: Imaging accessible data.
• Need for verification of affected versions and patch application.
• Requirement for monitoring and restricting network access.

Technical summary

The vulnerability in WebCenter Content: Imaging allows low-privileged attackers with network access via HTTP to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all WebCenter Content: Imaging accessible data. The CVSS 3.1 Base Score is 6.5 (Confidentiality impacts). This medium-severity vulnerability affects versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle Fusion Middleware's WebCenter Content: Imaging product. Defenders should assess exposure and apply necessary patches or mitigations.

Defensive priority

Medium

Recommended defensive actions

• Review and apply Oracle's security patches for WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0.
• Restrict network access to WebCenter Content: Imaging to only necessary personnel.
• Monitor WebCenter Content: Imaging systems for unauthorized access attempts.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• technicalSummary

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, its CVSS score, and affected versions. Evidence is limited to CVE and NVD records, which report a medium-severity vulnerability in Oracle Fusion Middleware's WebCenter Content: Imaging product. Defenders should verify affected versions, apply patches, and monitor for unauthorized access attempts. The CVE record was published on 2026-10-20T22:20:15.550Z and has not been modified since then.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.