This vulnerability arises from improper privilege management that allows an attacker with low-level network access to invoke SOAP endpoints in Oracle WebCenter Content: Imaging, enabling them to create, delete, or modify critical data. The flaw delivers both confidentiality and integrity impacts, as reflected in the CVSS 3.1 score of 6.8 and its vector (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N). The weakness is consistent with common weakness enumerations related to access control and privilege issues (CWE‑284 and CWE‑269).

The affected product is Oracle Corporation’s WebCenter Content: Imaging version 14.1.2.0.0. No other version or vendor information is specified in the advisory.

Exploitability is constrained to attackers who already have network connectivity to the SOAP service and sufficient low-privilege credentials. The EPSS score is unavailable, and the vulnerability is not listed in the CISA KEV catalog, suggesting that active exploitation is currently limited. However, the CVSS base score indicates that a successful exploit would allow significant unauthorized data manipulation across the entire accessible dataset of WebCenter Content: Imaging, posing a moderate to high risk if the environment is exposed to public or untrusted networks.