CVE-2026-87399 Oracle Corporation CVE debrief

Who should care

Defenders responsible for Oracle WebCenter Content deployments should assess exposure and prioritize remediation due to the medium severity of the vulnerability and potential impacts on data access and modifications. They should also verify affected versions and inventory, and review and apply Oracle's security patches for WebCenter Content.

Why it matters

CVE-2026-87399 is a medium-severity vulnerability in Oracle WebCenter Content that allows low-privileged attackers to compromise the product, potentially leading to unauthorized data access or modifications. Defenders responsible for Oracle WebCenter Content deployments should assess exposure and prioritize remediation.

• Potential unauthorized data creation, deletion, or modification
• Potential unauthorized data read access
• Requires verification of affected versions and inventory
• Remediation priority for Oracle WebCenter Content deployments

Technical summary

The vulnerability in Oracle WebCenter Content, a component of Oracle Fusion Middleware, allows low-privileged attackers with network access via HTTP to compromise the product. Successful attacks require human interaction and can result in unauthorized creation, deletion, or modification access to critical data or all Oracle WebCenter Content accessible data, as well as unauthorized read access to a subset of Oracle WebCenter Content accessible data.

Defensive priority

Medium

Recommended defensive actions

• Review and apply Oracle's security patches for WebCenter Content
• Restrict network access to the product
• Monitor for suspicious activity
• Verify affected versions and inventory
• Track exceptions and retest remediated assets
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, its impacts, and affected versions. However, the corpus does not establish remediation or verification details. The vulnerability has a CVSS score of 6.3 and a CVSS vector of (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N). Defenders should verify affected versions and inventory, and review and apply Oracle's security patches for WebCenter Content.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.