The vulnerability resides in Oracle WebCenter Content's Content Server component and enables a low‑privileged network attacker to exploit HTTP requests and fully compromise the application. The attack can lead to loss of confidentiality, integrity, and availability for all data and services managed by WebCenter Content. As described, the exploitation results in a complete takeover of the system.

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 are affected, as identified by the Oracle Fusion Middleware product line.

The CVSS score of 8.8 indicates a high severity risk, while the EPSS score of less than 1% suggests that zero‑day exploitation is infrequent. The vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be remote over HTTP, requiring only a low‑privileged account, and would enable full administrative control over WebCenter Content.