This vulnerability affects Oracle WebCenter Content, specifically versions 12.2.1.4.0 and 14.1.2.0.0. It is an easily exploitable flaw that allows unauthenticated attackers with network access via HTTP to compromise the system fully, potentially resulting in complete takeover of Oracle WebCenter Content. The CVSS 3.1 score of 9.8 reflects critical severity with high impact on confidentiality, integrity, and availability. Oracle's June 2026 Critical Security Patch Update includes patches for this vulnerability. The vendor strongly recommends applying these patches without delay. Workarounds include blocking network protocols required for exploitation and removing unnecessary privileges, but these may disrupt normal operations.

Successful exploitation can lead to complete compromise of Oracle WebCenter Content, affecting confidentiality, integrity, and availability of the system. This could allow attackers to take over the affected product entirely, posing severe risks to data and operational continuity.

Oracle has released security patches for this vulnerability as part of the June 2026 Critical Security Patch Update. Customers should apply these patches promptly to remediate the issue. Until patches are applied, risk can be partially mitigated by blocking network protocols required for the attack and removing unnecessary privileges from users, though these measures may impact application functionality. Patch status is confirmed by the vendor advisory, which strongly recommends timely patching.