CVE-2026-87391

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 21/100
Published: 2026-10-20 Modified: 2026-10-28 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity Conf. Impact Scope Change

CVSS Vector Breakdown

AV: Local
AC: Low
PR: High
UI: Required
S: Changed
C: High
I: None
A: None

Description

Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where WebCenter Content: Imaging executes to compromise WebCenter Content: Imaging. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in WebCenter Content: Imaging, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all WebCenter Content: Imaging accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N).

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
Oracle Corporation WebCenter Content: Imaging 12.2.1.4.0

Bug Bounty Relevance

21 / 100
✓ Low complexity

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N

EPSS — Exploitation Probability

0.15%
Raw Score 0.001480
Percentile 4.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00148
2026-10-28
0.00148

Intelligence Sources

mitre ref →
nvd ref →