The vulnerability exists in Oracle WebCenter Content 14.1.2.0.0 and allows a high‑privileged attacker with network access over HTTP to compromise the application. Successful exploitation requires engagement from a user other than the attacker but can result in the attacker achieving full control over the system, causing loss of confidentiality, integrity, and availability.

Oracle WebCenter Content version 14.1.2.0.0 hosted within Oracle Fusion Middleware.

The CVSS 3.1 base score of 8.4 indicates a high severity, while the EPSS score of less than 1% suggests that exploitation is unlikely but still plausible. The vulnerability is not listed in the CISA KEV catalog. An attacker would need to access the application over HTTP, possess high‑privilege credentials, and rely on a user to initiate the exploit, thereby creating a high‑impact scenario due to the scope change that may affect additional Oracle products.