This vulnerability affects Oracle WebCenter Content, specifically versions 12.2.1.4.0 and 14.1.2.0.0. It is an easily exploitable flaw that allows unauthenticated remote attackers to compromise the system via HTTP access. The vulnerability can lead to full system takeover, impacting confidentiality, integrity, and availability. Oracle has addressed this issue in its June 2026 Critical Security Patch Update, which includes targeted patches for this and other vulnerabilities. No direct exploit in the wild is reported yet. Oracle advises customers to apply the security patches immediately and stay on supported versions to prevent exploitation.

Successful exploitation of this vulnerability can result in complete takeover of Oracle WebCenter Content, affecting confidentiality, integrity, and availability of the system. This means attackers could gain unauthorized access, modify or delete data, and disrupt service availability.

Oracle has released security patches for this vulnerability as part of the June 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches without delay. Until patches are applied, risk may be reduced by blocking network protocols required for exploitation and restricting privileges to necessary users only, though these measures may affect application functionality. Patch status is confirmed by the vendor advisory, which emphasizes prompt patching as the primary mitigation.