A vulnerability exists in Oracle WebCenter Content: Imaging that permits an attacker with low privileges and network access via HTTP to execute arbitrary code and take full control of the system. The issue allows compromise of confidentiality, integrity, and availability, effectively granting an attacker complete control over the affected instance.

The flaw affects Oracle WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. These versions are distributed as part of Oracle Fusion Middleware and are commonly deployed in enterprise environments for image handling and management.

The CVSS base score of 8.8 indicates a high severity vulnerability, with low attack complexity and low privilege requirement. The EPSS score of less than 1% indicates a low probability of exploitation at this time, and the flaw is not listed in the CISA KEV catalog.However, because the exploitation vector is network‑based over HTTP and requires only low privileges, once a suitable attacker gains network access, they can bypass authentication and achieve full system takeover. Potential attack paths include sending specially crafted requests to exposed endpoints that fail to validate authentication before performing privileged operations.