Oracle WebCenter Content version 14.1.2.0.0 contains a Content Server flaw that permits a low‑privileged network attacker with HTTP access to gain unauthorized read or modify rights to critical data. The weakness requires a second person other than the attacker to provide interaction, making it a difficult-to-exploit vulnerability. Successful exploitation can lead to disclosure of confidential information or alteration or deletion of WebCenter Content records, thereby harming confidentiality and integrity.

The flaw affects the Oracle WebCenter Content product, specifically the Content Server component of version 14.1.2.0.0. No other vendors or products are directly listed as impacted.

With a CVSS 3.1 base score of 6.5, the vulnerability is of moderate severity, characterized by high attack complexity, low privileges, user interaction, and a network-based attack vector. The EPSS score is reported as < 1 %, indicating a very low but non‑zero likelihood of exploitation, and it is not currently listed in CISA's KEV catalog. Nonetheless, because the flaw can enable unauthorized access and data modification, organizations relying on WebCenter Content should treat it as a realistic risk, particularly if they store sensitive or regulated data.