The vulnerability in Oracle WebCenter Content: Imaging permits an attacker who already has high‑privileged access to the underlying host to compromise the application. Exploitation allows the attacker to read critical data handled by the imaging component. The defect is confined to the Core component and results in a confidentiality breach; integrity and availability are not directly impacted. The CVSS 3.1 base score of 5.5 reflects the need for local access, high privileges, user interaction, and indicates moderate severity primarily for confidential data exposure.

Oracle WebCenter Content: Imaging versions 12.2.1.4.0 and 14.1.2.0.0 are confirmed affected. The reported scope change indicates that successful compromise of the imaging component may additionally impact other Oracle Fusion Middleware products that interact with it, potentially broadening the impact beyond the immediate application.

The CVSS score of 5.5 and the EPSS score of fewer than 1% imply a modest risk profile and a low likelihood of exploitation at this time. The vulnerability is not listed in CISA’s KEV catalog, so no widespread exploitation has been documented. Attackers must first gain local, high‑privileged access on the host where the product runs, and the flaw requires human interaction from a user other than the attacker, indicating an insider or a compromised local account as the likely vector. Once accessed, an attacker can read all data exposed by WebCenter Content: Imaging, which could expose sensitive information.