This vulnerability in Oracle WebCenter Content: Imaging (versions 12.2.1.4.0 and 14.1.2.0.0) allows a low privileged attacker with network access over HTTP to compromise the system, potentially leading to full takeover. The CVSS 3.1 score is 8.8, reflecting high impact on confidentiality, integrity, and availability. The vulnerability is listed in Oracle's June 2026 Critical Security Patch Update advisory, which contains numerous security patches across Oracle products. However, the advisory does not explicitly confirm the availability of a specific patch or fix for this vulnerability. Oracle advises customers to apply the Critical Security Patch Update without delay to address this and other vulnerabilities. Workarounds include blocking network protocols required by the attack and removing unnecessary privileges, though these may disrupt normal operations.

Successful exploitation can lead to complete compromise of Oracle WebCenter Content: Imaging, affecting confidentiality, integrity, and availability of the system. This could allow an attacker to take over the affected product, potentially leading to unauthorized access, data manipulation, and service disruption.

Oracle strongly recommends applying the June 2026 Critical Security Patch Update promptly, which addresses this vulnerability among others. Until patches are applied, risk may be reduced by blocking network protocols required by the attack and removing unnecessary privileges from users. These mitigations may impact application functionality. Patch status for this specific vulnerability is not explicitly confirmed; customers should consult the Oracle advisory at https://www.oracle.com/security-alerts/cspujun2026.html for the latest remediation guidance.