This vulnerability affects Oracle WebCenter Content in versions 12.2.1.4.0 and 14.1.2.0.0. It is an easily exploitable flaw that requires a high privileged attacker with network access via HTTP to compromise the system. Successful exploitation can result in complete takeover of Oracle WebCenter Content, impacting confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Oracle’s July 2026 Critical Patch Update advisory mentions this vulnerability among many others but does not provide explicit patch or mitigation details for it individually. Customers are urged to apply patches from the Critical Patch Update promptly.

An attacker with high privileges and network access via HTTP can exploit this vulnerability to fully compromise Oracle WebCenter Content. This includes unauthorized disclosure, modification, or destruction of data and disruption of service availability. The impact is rated high with a CVSS score of 7.2, reflecting serious confidentiality, integrity, and availability consequences.

Oracle’s July 2026 Critical Patch Update advisory includes this vulnerability in its list but does not explicitly confirm patch availability or remediation status for it individually. Customers should review the advisory at https://www.oracle.com/security-alerts/cpujul2026.html and apply the relevant patches from the Critical Patch Update without delay. Staying on actively-supported versions and promptly applying Oracle security patches is strongly recommended. Patch status is not yet confirmed for this specific vulnerability—check the vendor advisory for current remediation guidance.