The vulnerability is located in the Application expert UI component of Oracle Trusted Answer Search, allowing a low‑privileged attacker who can reach the system over HTTP to exploit an easily exploitable flaw. The attacker requires a user interaction from a person other than themselves, implying a user‑interaction requirement. Exploitation can lead to unauthorized read access to critical data and to the ability to update, insert, or delete data that is visible to the application, thereby compromising confidentiality and integrity.

Oracle Trusted Answer Search version 26.1 is affected; the vulnerability is present in the Application expert UI component. No other affected versions are listed, and interactions with other products may result in additional impact if those products rely on Trusted Answer Search.

The CVSS 3.1 Base Score of 7.6 indicates high severity for confidentiality and integrity, while the EPSS score of less than 1% indicates a very low probability of exploitation. The vulnerability is not currently listed in the CISA Known Exploited Vulnerabilities catalog. Attackers would need network access to the application over HTTP, low host privileges, and a secondary user to interact with the system. The potential for loss of confidentiality and integrity means the risk remains significant for environments that store sensitive data in Trusted Answer Search.