Threats affecting pkg:maven/com.oracle.webcenter/webcenter-content-imaging

CVE-2026-87375 is a vulnerability in Oracle Fusion Middleware's WebCenter Content: Imaging product versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within the product. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with a high confidentiality impact but no integrity or availability impact. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.

CVE-2026-46784 is a critical vulnerability in Oracle WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data or all accessible data within the product. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high confidentiality and integrity impact without requiring user interaction or privileges. Oracle has acknowledged this vulnerability in its June 2026 Critical Security Patch Update advisory and strongly recommends applying the provided patches promptly to mitigate the risk. No specific patch links were provided in the input, but the vendor advisory contains patch availability information. Until patches are applied, risk reduction may be possible by blocking required network protocols or restricting privileges, though these may impact functionality.