The vulnerability resides in the Core component of Oracle WebCenter Content: Imaging, affecting version 14.1.2.0.0. An attacker with low privileges who can reach the SOAP interface over the network can exploit the flaw. Successful exploitation permits unauthorized creation, deletion, or modification of critical data stored in the product. The breach does not impact confidentiality or availability, but it compromises the integrity of all data accessible through the application.

Affected systems are Oracle Corporation WebCenter Content: Imaging 14.1.2.0.0, part of the Oracle Fusion Middleware stack deployed in enterprise content management environments. No other versions are listed as impacted.

The CVSS v3.1 score of 6.5 indicates moderate severity, focused on integrity impact. The EPSS score is unavailable, so the current likelihood of exploitation is unclear, and the vulnerability is not listed in CISA KEV catalog. The likely attack vector is network‑based SOAP, requiring only low privileges and no user interaction, suggesting attackers can act without authenticated credentials.