The vulnerability in Oracle WebCenter Sites allows an attacker with network access via HTTP to compromise the system without authentication. An attacker can read, modify, insert, or delete critical data, potentially accessing all data available through the platform. In addition, the attacker may cause a partial denial of service, impacting availability. The CVSS 3.1 Base Score of 8.6 reflects high confidentiality impact, low integrity impact, and low availability impact.

Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle Fusion Middleware are affected. These versions are deployed in various enterprise environments that rely on WebCenter Sites for content and site management.

The CVSS score of 8.6 indicates a high severity risk. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, but the lack of authentication requirement and simple HTTP-based exploitation path make it highly attractive for attackers. Successful exploitation provides unauthorized data access and partial disruption of services with network access only, implying a strong likelihood of real-world attacks.