The vulnerability resides in Oracle WebCenter Content’s Content Server component and allows a low‑privileged network attacker to perform unauthorized creation, deletion, or modification of critical data. A successful exploit directly impacts confidentiality and integrity, giving the attacker access to all data available in WebCenter Content. This is a classic access‑control flaw that can be leveraged without user interaction and with a high attack complexity. The CVSS 3.1 score of 6.8 reflects the significant confidentiality and integrity damage while denial of service is not in scope.

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 are affected. Administrators should verify whether their installations use either of these builds and consider whether they are deployed in a publicly exposed network. Only these specific releases are vulnerable; no support for newer releases is noted in the advisory.

Exploitation requires network access to the HTTP interface and a low‑privileged user account. The vulnerability is difficult to exploit, implying a non‑negligible effort by an attacker, yet the potential impact is high. No EPSS data is available, but the CVSS base score indicates moderate severity. The vulnerability is not listed in CISA KEV, suggesting no confirmed exploitation in the wild to date. Attackers would benefit from initial reconnaissance to identify exposed WebCenter Content endpoints and valid low‑privileged credentials. Once in, the attacker could gain privileged data access without further authentication steps.