This vulnerability affects Oracle WebCenter Content, a component of Oracle Fusion Middleware, specifically versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable by an attacker with low privileges who has logon access to the underlying infrastructure. Successful exploitation can lead to complete compromise of Oracle WebCenter Content, impacting confidentiality, integrity, and availability. The CVSS 3.1 vector indicates local attack vector with low attack complexity, requiring low privileges and no user interaction. Oracle's August 2026 Critical Security Patch Update advisory references this vulnerability among many others but does not provide explicit patch details for these versions in the input data.

An attacker with low privileges and logon access to the infrastructure hosting Oracle WebCenter Content can exploit this vulnerability to fully compromise the product. This includes complete loss of confidentiality, integrity, and availability of Oracle WebCenter Content, potentially allowing takeover of the system.

Oracle strongly recommends applying security patches without delay and remaining on actively supported versions. Although the vendor advisory lists this vulnerability in the August 2026 Critical Security Patch Update, explicit patch availability for Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 is not confirmed in the provided content. Users should consult the official Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for the latest patch information and apply any relevant updates promptly.