A flaw in Oracle WebCenter Content: Imaging allows a low‑privileged attacker with network access through HTTP to perform unauthorized creation, deletion or modification of critical data, thereby affecting the confidentiality and integrity of all data exposed by the component. The vulnerability does not provide direct denial of service but enables a persistent threat from an external network source.

Oracle Corporation WebCenter Content: Imaging version 14.1.2.0.0 is impacted. No information is available for other versions or products.

The CVSS 3.1 base score of 6.8 indicates moderate severity and the EPSS score is < 1%, indicating a low probability of exploitation. The issue is not listed in the CISA KEV catalog. Attackers would need only basic network connectivity and low privileges on the target host; successful exploitation can lead to full read‑write access to all data managed by WebCenter Content: Imaging, but it does not grant arbitrary code execution or system compromise.