This vulnerability affects Oracle WebCenter Content 14.1.2.0.0 and allows a high privileged attacker with network access over HTTP to compromise the system. Successful exploitation requires user interaction from a third party and can result in complete takeover of Oracle WebCenter Content. The vulnerability also has a scope change, meaning it can affect other Oracle products beyond WebCenter Content. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) reflects network attack vector, low attack complexity, high privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability. Oracle’s June 2026 Critical Security Patch Update advisory addresses this and many other vulnerabilities, urging customers to apply patches promptly. However, no explicit patch version or fix details for this specific CVE are provided in the advisory content.

Successful exploitation can lead to full compromise of Oracle WebCenter Content 14.1.2.0.0, including takeover of the system. The vulnerability impacts confidentiality, integrity, and availability of the affected product. Due to scope change, other Oracle products integrated or dependent on WebCenter Content may also be affected. The attack requires a high privileged attacker with network access and user interaction from a third party, which may limit exploitability but does not eliminate risk.

Oracle strongly recommends applying the June 2026 Critical Security Patch Update as soon as possible to address this vulnerability along with others. Until patches are applied, risk may be reduced by blocking network protocols required for the attack and by removing unnecessary privileges or access to sensitive packages from users who do not require them. These mitigations may impact application functionality and should be tested accordingly. Patch status for this specific CVE is not explicitly confirmed in the advisory; customers should consult the Oracle advisory at https://www.oracle.com/security-alerts/cspujun2026.html for the latest patch availability and instructions.