This vulnerability affects Oracle WebCenter Content (component: Content Server) in versions 12.2.1.4.0 and 14.1.2.0.0. It is exploitable remotely over HTTP without authentication but requires user interaction from a third party. Successful exploitation can lead to unauthorized access to critical or all accessible content data, unauthorized modification (update, insert, delete) of some data, and partial denial of service conditions. The CVSS vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L) indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, low integrity impact, and low availability impact. The vulnerability is associated with CWE-601 (URL Redirection), CWE-284 (Improper Access Control), and CWE-352 (Cross-Site Request Forgery). The Oracle Critical Patch Update advisory referenced does not explicitly state patch availability or remediation details for this CVE, so patch status is not confirmed.

An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to critical or all data accessible through Oracle WebCenter Content. The attacker can also perform unauthorized data modifications (update, insert, delete) on some content and cause a partial denial of service. Exploitation requires human interaction from a user other than the attacker. The confidentiality impact is high, while integrity and availability impacts are low. This could lead to data breaches and partial service disruption.

Patch status is not yet confirmed — check the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly when available and remaining on actively supported versions. Until a patch is confirmed and applied, organizations should consider minimizing exposure of Oracle WebCenter Content to untrusted networks and educate users to avoid interacting with suspicious content that could trigger exploitation.