CVE-2026-87377 Oracle Corporation CVE debrief

Who should care

Defenders responsible for Oracle Fusion Middleware, specifically WebCenter Content: Imaging, should assess exposure and prioritize patching. System administrators and security teams managing network access and data integrity should verify their deployment contexts.

Why it matters

Defenders should care about CVE-2026-87377 because it allows a low-privileged attacker with network access via SOAP to compromise WebCenter Content: Imaging, potentially leading to unauthorized data access or modification. This vulnerability requires verification of data integrity and access controls, and its exploitation could result in confidentiality and integrity impacts.

• Potential unauthorized data access or modification
• Compromise of WebCenter Content: Imaging system
• Integrity and confidentiality impacts
• Verification of data integrity and access controls required

Technical summary

The vulnerability is in the Core component of WebCenter Content: Imaging, affecting version 14.1.2.0.0. It has a CVSS score of 6.8, indicating medium severity. The vulnerability allows a low-privileged attacker with network access via SOAP to compromise the system, potentially leading to unauthorized creation, deletion, or modification of critical data. This could result in confidentiality and integrity impacts. Defenders should focus on verifying data integrity and access controls, and consider applying patches or mitigations.

Defensive priority

Medium

Recommended defensive actions

• Review and apply Oracle's security patches for WebCenter Content: Imaging version 14.1.2.0.0
• Restrict network access to WebCenter Content: Imaging to minimize the attack surface
• Monitor SOAP traffic for suspicious activity
• Verify data integrity and access controls for WebCenter Content: Imaging
• Conduct a thorough review of affected product deployments in managed environments
• Track exceptions and retest remediated assets to ensure patching effectiveness
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its CVSS score of 6.8 and potential impacts on confidentiality and integrity. The vulnerability is in the Core component of WebCenter Content: Imaging, affecting version 14.1.2.0.0. Evidence from Oracle's security alert page and other sources indicates that exploitation could result in unauthorized creation, deletion, or modification of critical data. Defenders should verify their deployment contexts and consider applying patches or mitigations.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.