---
id: "CVE-2026-87377"
kind: "vulnerability"
aliases: ["CVE-2026-87377"]
title: "Oracle WebCenter Content Imaging: low-privileged SOAP user can read and change data"
severity: "medium"
cvss: 6.8
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["fusion-middleware", "oracle", "self-hosted", "soap", "vendor", "webcenter-content"]
not_affected_if: ["no-soap-exposure", "other-version"]
published_at: "2026-10-20T22:20:15+00:00"
first_seen_at: "2026-10-23T21:57:25+00:00"
updated_at: "2026-10-25T03:43:07+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87377", "first_seen_at": "2026-10-23T21:57:25+00:00"}]
---

# Oracle WebCenter Content Imaging: low-privileged SOAP user can read and change data

A flaw in the Core component of Oracle WebCenter Content Imaging 14.1.2.0.0 lets a low-privileged user reach the product over SOAP and gain unauthorized access to data. An attacker can create, delete or modify critical data and read all data the product can access, though exploitation is difficult.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Confirm the installed version is `14.1.2.0.0` in the WebCenter Content Imaging admin console or deployment record
- Check whether the SOAP endpoint of WebCenter Content Imaging is reachable from untrusted networks

## Fix

- Apply the Oracle Critical Patch Update fix for WebCenter Content Imaging 14.1.2.0.0 (version to move to: unknown, see Oracle advisory)

## Timeline

- 2026-10-23T21:57:25+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-87377

## From the sources

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).   The supported version that is affected is 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via SOAP to compromise WebCenter Content: Imaging.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all WebCenter Content: Imaging accessible data as well as  unauthorized access to critical data or complete access to all WebCenter Content: Imaging accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_