CVE-2026-83022
HighCVSS 7.9Summary
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It is difficult to exploit, requires access to the physical communication segment and user interaction. Successful attack can lead to takeover of the system.
Risk Assessment
Risk of takeover of Oracle WebCenter Enterprise Capture, potentially impacting other products and compromising confidentiality, integrity, and availability.
Recommendation
Apply patches provided by Oracle for affected versions. Restrict physical access to infrastructure and require user interaction to reduce risk.
Other vulnerabilities in Oracle WebCenter Enterprise Capture
See all- CVE-2026-83013High
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable by low-privileged attacker via HTTP network access. Successful attack can lead to takeover of the system.
- CVE-2026-83012High
Vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It is easily exploitable by low-privileged attacker via HTTP network access. Can lead to unauthorized access to critical data and impact other products.
- CVE-2026-83010High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A high-privileged attacker with network access via HTTP can exploit it, but human interaction from another person is required. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data and full access to all product data.
- CVE-2026-83009High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily exploit it, leading to takeover of the product. Confidentiality, integrity, and availability impacts are high.
- CVE-2026-83008High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via T3 or IIOP can easily exploit it, leading to takeover of the product. Confidentiality, integrity, and availability impacts are high.
- CVE-2026-83007High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily exploit it, potentially impacting additional products (scope change). This can result in unauthorized access to and modification of critical data.
- CVE-2026-83005High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can easily exploit it, leading to takeover of the product. Confidentiality, integrity, and availability impacts are high.
- CVE-2026-83004High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with local logon to the infrastructure can exploit it, but human interaction is required. This can lead to unauthorized creation, deletion, or modification of critical data and full access to all product data.
- CVE-2026-83003High
Vulnerability in Oracle WebCenter Enterprise Capture (Client Bundle component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via SOAP can easily exploit it, potentially impacting additional products (scope change). This can result in unauthorized access to and modification of critical data.
- CVE-2026-83339Critical
Vulnerability in the Oracle WebCenter Enterprise Capture product (component: Client Bundle) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to take over the system.
Original NVD description (English source)
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle WebCenter Enterprise Capture executes to compromise Oracle WebCenter Enterprise Capture. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 7.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).