The vulnerability resides in Oracle WebCenter Content’s Content Server component. An unauthenticated attacker with simple network connectivity over HTTP can exploit it, gaining read access to all data stored in the platform and, in some cases, modifying or deleting entries. The flaw results in confidentiality and integrity violations but does not affect availability.

Affected versions are Oracle WebCenter Content 12.2.1.4.0 and 14.1.2.0.0, part of Oracle Fusion Middleware. These releases are supported and critical for many enterprises managing document repositories.

The CVSS 3.1 base score of 6.5 indicates moderate severity, with a high attack complexity and no authentication required. The EPSS score is not available, and the vulnerability has not yet been listed in CISA’s KEV catalog, suggesting limited or no known exploitation. Nonetheless, because the flaw allows unauthenticated network access, organizations should treat it as a risk for data exposure. Attackers would typically issue HTTP requests to vulnerable endpoints exposed on the web server without providing credentials.