Description

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Content, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebCenter Content accessible data as well as unauthorized read access to a subset of Oracle WebCenter Content accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebCenter Content. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L).

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "7.1",
  "pubDate": "2026-08-18T21:17:41.987Z",
  "pubdate": "2026-08-18T21:17:41.987Z",
  "executiveSummary": "An easily exploitable vulnerability exists within the Content Server component of Oracle WebCenter Content, specifically affecting supported versions 12.2.1.4.0 and 14.1.2.0.0. This network-based security flaw allows an unauthenticated remote attacker with HTTP access to compromise the targeted system, contingent upon human interaction from a victim other than the attacker. Due to a scope change, successful exploitation extends its impact beyond Oracle WebCenter Content to potentially affect additional integrated products. The compromise results in unauthorized read, update, insert, and delete access to a subset of accessible data, alongside the capability to induce a partial denial of service condition against the application. With a CVSS 3.1 base score of 7.1, the vulnerability presents significant risk across confidentiality, integrity, and availability vectors, requiring immediate administrative attention and remediation adherence.",
  "technicalDetails": "The vulnerability resides within the Content Server component of Oracle WebCenter Content across versions 12.2.1.4.0 and 14.1.2.0.0. It is exposed via network protocols using HTTP, allowing unauthenticated threat actors to interact directly with the vulnerable interface without requiring prior credentials or elevated privileges.\nThe attack vector is network-based (AV:N) with low attack complexity (AC:L), meaning an attacker can craft and transmit malicious requests over the network with minimal technical barriers. However, successful exploitation mandates human interaction (UI:R), typically requiring a user other than the attacker to perform an action, such as clicking a maliciously crafted link or interacting with manipulated content delivered through the browser.\nA notable characteristic of this vulnerability is the scope change (S:C), indicating that the security scope of the vulnerable component differs from the security scope of the affected systems. Consequently, successful attacks may cascade beyond the boundaries of Oracle WebCenter Content, significantly impacting additional integrated or ancillary products within the broader infrastructure.\nUpon successful exploitation, the attacker achieves unauthorized access to application functionality and data assets. This includes unauthorized read access to a subset of data accessible by Oracle WebCenter Content, as well as unauthorized update, insert, and delete capabilities against specific data sets. Furthermore, the payload behavior enables the adversary to trigger a partial denial of service (A:L) condition, degrading application availability and performance for legitimate users.\nThe step-by-step attack flow involves an unauthenticated attacker delivering a crafted HTTP request or malicious link targeting the vulnerable Content Server component. Upon the required human interaction by a victim, the application processes the malicious input improperly, leading to unauthorized data manipulation, disclosure, or service degradation across the changed security scope."
}