CVE-2026-83012
HighCVSS 7.7Summary
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable by low-privileged attacker via HTTP network access. Can lead to unauthorized access to critical data and impact other products.
Risk Assessment
Risk of unauthorized access to sensitive data, potentially impacting other products and compromising confidentiality.
Recommendation
Apply Oracle patches. Restrict network access and monitor low-privileged user activity.
Other vulnerabilities in Oracle WebCenter Enterprise Capture
See all- CVE-2026-83022High
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It is difficult to exploit, requires access to the physical communication segment and user interaction. Successful attack can lead to takeover of the system.
- CVE-2026-83013High
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable by low-privileged attacker via HTTP network access. Successful attack can lead to takeover of the system.
- CVE-2026-83010High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A high-privileged attacker with network access via HTTP can exploit it, but human interaction from another person is required. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data and full access to all product data.
- CVE-2026-83009High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily exploit it, leading to takeover of the product. Confidentiality, integrity, and availability impacts are high.
- CVE-2026-83008High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via T3 or IIOP can easily exploit it, leading to takeover of the product. Confidentiality, integrity, and availability impacts are high.
- CVE-2026-83007High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily exploit it, potentially impacting additional products (scope change). This can result in unauthorized access to and modification of critical data.
- CVE-2026-83005High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily exploit it, leading to takeover of the product. Confidentiality, integrity, and availability impacts are high.
- CVE-2026-83004High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with local logon to the infrastructure can exploit it, but human interaction is required. This can lead to unauthorized creation, deletion, or modification of critical data and full access to all product data.
- CVE-2026-83003High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via SOAP can easily exploit it, potentially impacting additional products (scope change). This can result in unauthorized access to and modification of critical data.
- CVE-2026-83339Critical
Vulnerability in the Oracle WebCenter Enterprise Capture product (component: Client Bundle) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to take over the system.
Original NVD description (English source)
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Enterprise Capture accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

