This vulnerability affects Oracle WebCenter Content: Imaging (component: Core) in versions 12.2.1.4.0 and 14.1.2.0.0. It permits an unauthenticated attacker with network access over HTTP to compromise the system, potentially leading to full takeover. Exploitation requires user interaction from a third party, making it difficult to exploit. The CVSS 3.1 base score is 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. The vulnerability is tracked as CWE-601. The Oracle Critical Patch Update advisory for July 2026 references this issue but does not explicitly confirm patch availability or remediation status for this specific vulnerability.

Successful exploitation can result in complete compromise of Oracle WebCenter Content: Imaging, affecting confidentiality, integrity, and availability of the system. The attacker does not require prior authentication but does require human interaction from a user other than themselves, which limits the ease of exploitation. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory (https://www.oracle.com/security-alerts/cpujul2026.html) for current remediation guidance. Oracle strongly recommends applying Critical Patch Updates promptly and staying on actively supported versions. Until an official patch is confirmed, organizations should consider risk mitigation strategies consistent with the requirement for user interaction and network access, but no specific mitigations are detailed in the advisory.