This vulnerability affects Oracle WebCenter Content: Imaging (versions 12.2.1.4.0 and 14.1.2.0.0). It is difficult to exploit and requires an attacker to have unauthenticated access to the physical communication segment attached to the hardware where the product executes. The vulnerability can lead to a complete compromise of WebCenter Content: Imaging, with potential impact on other related Oracle products. The CVSS 3.1 vector indicates attack vector as adjacent network (AV:A), high attack complexity (AC:H), no privileges required (PR:N), no user interaction (UI:N), scope changed (S:C), and high confidentiality, integrity, and availability impacts (C:H/I:H/A:H). The vendor advisory does not explicitly confirm a patch or fix for this vulnerability but recommends applying security patches as part of the July 2026 Critical Patch Update. No known exploits have been reported.

Successful exploitation can result in full takeover of Oracle WebCenter Content: Imaging, compromising confidentiality, integrity, and availability of the product. The vulnerability also has a scope change, meaning it may significantly impact additional Oracle products beyond WebCenter Content: Imaging. The attack requires physical access to the communication segment, making exploitation difficult. No known exploits in the wild have been reported.

The vendor advisory does not explicitly confirm a patch or remediation for this specific vulnerability but strongly recommends applying security patches from the July 2026 Critical Patch Update without delay. Organizations should verify patch availability for WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0 in the Oracle advisory and apply them promptly. Since the vulnerability requires physical access to the communication segment, restricting such access can reduce risk. Patch status is not yet confirmed—check the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance.