Oracle WebCenter Content: Imaging exposes non‑confidential data to a low‑privileged attacker who can reach the system via SOAP. The flaw allows the attacker to perform unauthorized read operations against a limited set of accessible information. The weakness corresponds to improper access control and information exposure, as described by CWE‑284 and CWE‑200, and results in a confidentiality impact as indicated by the CVSS vector.

The vulnerability affects Oracle Corporation WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0. These versions are part of Oracle Fusion Middleware and are susceptible to the described issue.

The CVSS 3.1 base score of 4.3 reflects a moderate risk; the exploit is readily achievable by an attacker with network access to the SOAP interface and only requires low privileges. No EPSS data is available and the vulnerability is not listed in the CISA KEV catalog. The attack vector is network‑based through SOAP, making it potentially reachable from external networks if the endpoint is exposed.