CVE-2026-87379 Oracle Corporation CVE debrief

Who should care

Defenders responsible for WebCenter Content: Imaging deployments, especially those with low-privileged network access via SOAP, should assess exposure and prioritize verification and remediation.

Why it matters

CVE-2026-87379 is a medium-severity vulnerability in WebCenter Content: Imaging that allows low-privileged attackers to compromise data confidentiality. Defenders should prioritize verifying exposure, assessing impact, and applying Oracle's security patches.

• Potential unauthorized read access to a subset of WebCenter Content: Imaging data.
• Need to verify exposure in WebCenter Content: Imaging deployments.
• Prioritize applying Oracle's security patches for WebCenter Content: Imaging.
• Assess the impact of data confidentiality compromise.

Technical summary

The vulnerability in WebCenter Content: Imaging allows low-privileged attackers with network access via SOAP to compromise the system, resulting in unauthorized read access to a subset of accessible data. The vulnerability has a CVSS score of 4.3 and a severity of MEDIUM. The CVE record was published on 2026-10-20T22:20:16.017Z and has not been modified since then. Defenders should prioritize verifying exposure, assessing impact, and applying Oracle's security patches. The vulnerability affects WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0.

Defensive priority

Defenders should prioritize verifying exposure in WebCenter Content: Imaging deployments, especially those with low-privileged network access via SOAP.

Recommended defensive actions

• Verify WebCenter Content: Imaging deployments for exposure, especially with low-privileged network access via SOAP.
• Assess the impact of unauthorized read access to a subset of WebCenter Content: Imaging data.
• Review and apply Oracle's security patches for WebCenter Content: Imaging.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• technicalSummary

Evidence notes

The CVE record and NVD entry provide details on the vulnerability in WebCenter Content: Imaging, allowing unauthorized read access to a subset of accessible data. The vulnerability has a CVSS score of 4.3 and a severity of MEDIUM. The CVE record was published on 2026-10-20T22:20:16.017Z and has not been modified since then. Defenders should verify exposure in WebCenter Content: Imaging deployments, especially those with low-privileged network access via SOAP.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.