A vulnerability in the Oracle WebCenter Content component allows an unauthenticated attacker to use a network HTTP interface to create, delete, or modify critical data. Because the flaw is difficult to exploit, it does not require authentication and can directly compromise the confidentiality and integrity of all data accessible through the application. The potential for a scope change means that related products could be affected by the same vulnerability, amplifying risk.

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 are known to be vulnerable. These are part of Oracle Fusion Middleware and are commonly deployed in enterprise content management environments.

The CVSS 3.1 base score of 8.7 indicates high severity. The attack vector is network-based via HTTP and requires no prior authentication. While EPSS is not available, the lack of a KEV listing suggests the vulnerability is not yet known to be actively exploited, but the high CVSS score and scope change imply a significant risk if the application is exposed to external networks.