The vulnerability exists in the Core component of Oracle WebCenter Content: Imaging. An attacker with low privileges who can reach the system over HTTP can exploit this flaw, bypassing the application's confidentiality controls and enabling unauthorized reading of critical data. The flaw requires only network connectivity, no user interaction, and can expose all Imaging data accessible through the application.

Oracle Corporation's WebCenter Content: Imaging is affected. Versions 12.2.1.4.0 and 14.1.2.0.0 are listed as impacted. No other versions are identified in the current advisory.

The CVSS score of 6.5 indicates a moderate severity with significant confidentiality impact. The EPSS score is not available, suggesting limited current exploitation data, but the vulnerability is easily exploitable with low effort. The lack of inclusion in the KEV catalog implies no widely distributed exploit code at present. Network access alone suffices for exploitation, so publicly reachable installations should be considered at risk unless protected by network segmentation or firewall controls.