This vulnerability exists in the Core component of Oracle Fusion Middleware's WebCenter Content: Imaging product. It is exploitable remotely over the network via HTTP by an attacker with low privileges and does not require user interaction. Successful exploitation can result in complete compromise of the WebCenter Content: Imaging system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor advisory is a general Critical Patch Update notice listing many products and versions but does not explicitly state a patch for this specific vulnerability or affected versions.

The vulnerability allows an attacker with low privileges and network access to fully compromise Oracle WebCenter Content: Imaging, impacting confidentiality, integrity, and availability of the system. This could lead to unauthorized data access, modification, and service disruption or takeover of the affected product.

The vendor advisory linked is a general Critical Patch Update advisory that does not explicitly confirm patch availability or remediation for this vulnerability or the affected versions. Patch status is not yet confirmed — check the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly when available and remaining on actively supported versions.