This vulnerability affects Oracle WebCenter Content, a component of Oracle Fusion Middleware. It is exploitable by a high privileged attacker over the network via HTTP and can result in complete compromise of the product. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. The affected versions explicitly stated are 12.2.1.4.0 and 14.1.2.0.0. The Oracle Critical Patch Update advisory for July 2026 mentions many patches but does not explicitly confirm a patch for this specific vulnerability in the provided excerpt. No known exploits in the wild are reported at this time.

Successful exploitation can lead to full takeover of Oracle WebCenter Content, impacting confidentiality, integrity, and availability of the system. This could allow an attacker with high privileges and network access to execute unauthorized actions within the product environment.

Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. The July 2026 Critical Patch Update advisory references multiple patches but does not explicitly confirm a patch for this vulnerability in the provided content. Patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Until a patch is confirmed and applied, restrict network access to Oracle WebCenter Content to trusted users with high privileges only.