Live › vulnerability › CVE-2026-87361
Go to dashboardOracle WebCenter Content Server 12.2.1.4.0 has a flaw that lets a low-privileged user reach the server over HTTP and make unauthorized updates, inserts or deletes to some accessible content. The CVSS 3.1 score is 4.3 with only integrity impact, so confidentiality and availability are not listed as affected.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Oracle WebCenter Content Server version 12.2.1.4.0 that accept HTTP requests from low-privileged users. The sources do not say which configurations or features are required, so other versions and deployments are not confirmed affected.
No product ranges from the sources yet.
12.2.1.4.0 (check the Oracle Fusion Middleware or WebCenter Content installation or patch inventory)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebCenter Content accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-87361")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.