A flaw in Oracle WebCenter Content’s Content Server component allows a network‑based attacker, who already possesses high privileges, to fully compromise the application. The vulnerability is easily exploitable and can result in the attacker taking control of the server, thereby destroying confidentiality, integrity, and availability. The CVSS vector indicates that the attack requires remote network access, low attack complexity, high privileges, and no user interaction, making it a significant risk for affected systems.

Oracle WebCenter Content, versions 12.2.1.4.0 and 14.1.2.0.0

The CVSS base score of 7.2 classifies the issue as high severity, yet the EPSS score is below 1%, suggesting a low likelihood of widespread exploitation at present. Oracle has not listed the vulnerability in CISA’s KEV catalog. The attack vector inferred from the CVSS parameters is a network‑directed exploit via HTTP, so systems exposing WebCenter Content to untrusted networks face the highest risk.