A flaw in Oracle WebCenter Content’s Content Server allows an attacker with local, low privileges to use HTTP traffic to compromise the application. Once exploited, the attacker can gain control over the WebCenter Content instance, jeopardizing confidentiality, integrity, and availability of the data it manages.

The vulnerability affects Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0. Attackers can reach the flaw through the HTTP interface from any host that can contact the server.

With a CVSS 3.1 base score of 9.9, the flaw is classified as critical. The EPSS score of less than 1% indicates a low probability of exploitation in the wild at this time, and the flaw is not currently listed in CISA’s KEV catalog. Nevertheless, the attack vector requires only network access via HTTP, and the scope change in the vector suggests that exploitation could extend to other products that integrate with the Content Server.