CVE-2026-83003

CVE-2026-83003 is a high-severity vulnerability (CVSS 3.1 base score 8.5) in the Client Bundle component of Oracle WebCenter Enterprise Capture, part of Oracle Fusion Middleware, affecting versions 12.2.1.4.0 and 14.1.2.0.0. It is rated easily exploitable by a low-privileged, authenticated attacker with network access who sends crafted SOAP requests to the vulnerable service. Successful exploitation yields unauthorized read access to critical data — up to complete access to all data reachable through Enterprise Capture — plus unauthorized update, insert, and delete access to some of that data, and the scope change (S:C) indicates impacts can spread to additional products beyond Enterprise Capture itself. Organizations running the affected versions with SOAP endpoints reachable by low-trust accounts are at risk. No public proof of concept is known and the flaw is not in CISA's Known Exploited Vulnerabilities catalog, so exploitation in the wild is not known to be occurring.

What to do: Apply the Oracle Critical Patch Update that remediates CVE-2026-83003 to all instances of WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0. Until patched, restrict network access to the Enterprise Capture SOAP interface to trusted users and network segments, and enforce least privilege on any accounts that can authenticate to it. Review audit logs for anomalous document read, update, insert, or delete activity, and inspect adjacent systems for signs of follow-on compromise given the confirmed scope change.