CVE Catalog

CVE-2026-83007

HighCVSS 8.5
Published: Translated: NVD NIST

Summary

Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily exploit it, potentially impacting additional products (scope change). This can result in unauthorized access to and modification of critical data.

Risk Assessment

High risk of confidentiality and integrity impact on Oracle WebCenter Enterprise Capture, with potential impact on additional products. The attack is easy to perform by a low-privileged attacker.

Recommendation

Apply Oracle patches for versions 12.2.1.4.0 and 14.1.2.0.0. Restrict network access via HTTP and enforce least-privilege access controls.

Other vulnerabilities in Oracle WebCenter Enterprise Capture

See all
Original NVD description (English source)

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Enterprise Capture accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Enterprise Capture accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS