Oracle HTTP Server 12.2.1.4.0 has a flaw that allows a low‑privileged attacker who can log on to the host where the server runs to override server security checks and take control of the process. Successful exploitation gives the attacker full read, write, and execute access to the server, permitting data disclosure, modification, and denial of service.

This vulnerability affects Oracle HTTP Server version 12.2.1.4.0, part of Oracle Fusion Middleware's Web Listener component, which is installed on infrastructure that allows users with local system logons.

The CVSS base score of 7.8 marks this issue as high severity, with impacts to confidentiality, integrity, and availability. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog, so exploitation probability cannot be quantified precisely. Based on the vector, the likely attack vector is local with low privileges; an attacker must already have a user account on the machine hosting the server.