This vulnerability affects the Oracle WebCenter Content component of Oracle Fusion Middleware, specifically versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable by an attacker with low privileges who has network access via HTTP. Exploitation requires user interaction from someone other than the attacker. The CVSS 3.1 base score is 8.0, indicating high impact on confidentiality, integrity, and availability. The vulnerability is related to CWE-352 (Cross-Site Request Forgery). No official patch or remediation level is explicitly stated in the vendor advisory, but Oracle's July 2026 Critical Patch Update advisory references multiple patches and strongly recommends applying security patches promptly.

Successful exploitation can result in complete takeover of Oracle WebCenter Content, affecting confidentiality, integrity, and availability of the system. The attacker can compromise the system despite having low privileges, leveraging network access via HTTP and requiring user interaction from a third party.

Oracle's July 2026 Critical Patch Update advisory recommends applying the latest security patches without delay. Although no specific patch or remediation level is explicitly stated for this vulnerability, customers should ensure they are running actively-supported versions and apply Oracle's Critical Patch Updates promptly to mitigate this and other vulnerabilities. Patch status is not yet confirmed for this specific CVE—check the vendor advisory for current remediation guidance.