CVE-2026-87391 Oracle Corporation CVE debrief

Who should care

Administrators and security teams responsible for WebCenter Content: Imaging deployments, especially those with high-privileged users and sensitive data, should assess exposure, prioritize patching, and monitor for suspicious activity. They should also verify access controls and data protection measures, and review compensating controls for exposed systems.

Why it matters

CVE-2026-87391 is a medium-severity vulnerability in Oracle Fusion Middleware's WebCenter Content: Imaging product, allowing high-privileged attackers to compromise the product and access critical data. Defenders should assess exposure, prioritize patching, and monitor for suspicious activity.

• Potential unauthorized access to critical data
• Possible scope changes impacting additional products
• Need for verification of affected versions and patching status
• Importance of monitoring for suspicious activity

Technical summary

The vulnerability in WebCenter Content: Imaging allows high-privileged attackers with logon access to compromise the product, potentially impacting additional products and allowing unauthorized access to critical data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). The vulnerability is tracked as CVE-2026-87391 and affects versions 12.2.1.4.0 and 14.1.2.0.0 of WebCenter Content: Imaging. Successful attacks require human interaction and can result in unauthorized access to critical data or complete access to all accessible data.

Defensive priority

Assess exposure, prioritize patching, and monitor for suspicious activity

Recommended defensive actions

• Assess exposure and prioritize patching for WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0
• Monitor for suspicious activity and potential scope changes
• Verify access controls and data protection measures
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, its impact, and affected versions. The vulnerability affects WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. Defenders should verify the patching status of these versions and assess exposure. The CVSS 3.1 Base Score is 5.5, indicating a medium-severity vulnerability.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.