Oracle WebCenter Content EUVD-2026-46857

Exploitation requires network reachability to the Oracle WebLogic T3 or IIOP protocol listener serving WebCenter Content: Imaging (typically the WebLogic listen port such as 7001, or the IIOP/IIOPS port). Per the CVSS vector (AV:N/AC:L/PR:N/UI:N), no authentication and no user interaction are needed against affected versions 12.2.1.4.0 and 14.1.2.0.0. The key limiting factor is exposure of T3/IIOP: in deployments where these protocols are firewalled or connection-filtered to internal administration networks - a common WebLogic hardening step - remote exploitation is not possible from untrusted networks even though the software is vulnerable. Only the two listed versions are affected.

All available signals point to genuine high priority: the CVSS vector is AV:N/AC:L/PR:N/UI:N (network-reachable, low complexity, no privileges, no user interaction) with C:H/I:H/A:H, and Oracle explicitly labels it 'easily exploitable' resulting in 'takeover.' However, EPSS and SSVC data were not provided in the input and cannot be quoted, and the vulnerability is not in CISA KEV, so there is no evidence of active exploitation yet. No POC has been identified. The realistic risk driver is exposure: if the WebLogic T3/IIOP ports are reachable from untrusted networks, this is a top-tier patch-now issue; if those protocols are firewalled to internal management networks only (a common hardening practice), the practical exposure is materially lower. The signals are consistent rather than conflicting - the main uncertainty is missing EPSS/KEV telemetry, not disagreement between sources.

An attacker who can reach the WebLogic T3 or IIOP listener sends a crafted serialized payload over that protocol to the WebCenter Content: Imaging Core, requiring no credentials and no user interaction. Because the flaw yields full takeover, the attacker gains code execution / administrative control of the Imaging instance and its stored content. No public POC has been identified at time of analysis, but the low attack complexity means one could emerge quickly following the CPU disclosure.