This vulnerability affects Oracle WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. It is an easily exploitable flaw that allows unauthenticated attackers with network access via HTTP to compromise the system, resulting in full takeover. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) reflects that no privileges or user interaction are required, and the impact is critical across confidentiality, integrity, and availability. Oracle has published this issue as part of its June 2026 Critical Security Patch Update, which contains targeted security fixes including for this vulnerability. The vendor strongly urges customers to apply these patches without delay to mitigate the risk. Workarounds such as blocking network protocols or removing unnecessary privileges may reduce risk temporarily but can disrupt normal operations.

Successful exploitation allows an unauthenticated attacker with network access via HTTP to fully compromise Oracle WebCenter Content: Imaging, leading to complete system takeover. This includes full loss of confidentiality, integrity, and availability of the affected system. The vulnerability is critical with a CVSS score of 9.8, indicating severe impact on affected environments.

Oracle has released security patches for this vulnerability as part of the June 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches immediately to remediate the vulnerability. Until patches are applied, risk may be reduced by blocking network protocols required for exploitation or by removing unnecessary privileges from users, though these measures may impact application functionality. Patch status is confirmed by the vendor advisory. No indication exists that the vulnerability is already mitigated without patching.