CVE-2026-83013

Oracle WebCenter Enterprise Capture, a document capture component of Oracle Fusion Middleware, contains an easily exploitable vulnerability in its Client Bundle component that allows a low-privileged authenticated attacker with network access via HTTP to compromise the application. Successful exploitation results in a complete takeover of Oracle WebCenter Enterprise Capture, with high impact on confidentiality, integrity, and availability (CVSS 3.1 base score 8.8). The affected versions are 12.2.1.4.0 and 14.1.2.0.0, both of which are supported releases commonly deployed in enterprise document management environments. Because exploitation requires only a low-privilege account (or any valid credentialed access), the risk is highest where many users can reach the capture interface. No public proof of concept is known and there is no evidence of in-the-wild exploitation to date.

What to do: Apply the Oracle Critical Patch Update (CPU) that addresses this CVE to both 12.2.1.4.0 and 14.1.2.0.0 deployments, and verify your installed version via the Middleware home or Enterprise Capture administration console. Restrict HTTP access to the Enterprise Capture client/server endpoints to trusted networks and VPN users only, and review audit logs for anomalous activity by low-privilege accounts. Since a takeover grants full control, rotate credentials and service accounts on affected hosts after patching if compromise is suspected.