A remote unauthenticated vulnerability exists in Oracle WebCenter Content (component: Content Server) that can be exploited over HTTP. Successful exploitation enables an attacker to read critical data and potentially gain unrestricted access to all data accessible through the WebCenter Content platform, resulting in a severe confidentiality compromise. The weakness arises from improper input validation and authorization controls that allow requests to retrieve protected content without authentication.

Oracle WebCenter Content version 14.1.2.0.0 is affected. The vulnerability applies to the Oracle Fusion Middleware stack that includes the Content Server component.

The CVSS 3.1 score of 7.5 indicates a high severity impact with a high confidentiality impact, while the EPSS score of less than 1% signals that exploitation is currently unlikely. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is via an unauthenticated HTTP request to the WebCenter Content service, taking advantage of improper authorization checks.