CVE-2026-83022

A difficult-to-exploit, unauthenticated vulnerability exists in the Client Bundle component of Oracle WebCenter Enterprise Capture (part of Oracle Fusion Middleware), affecting versions 12.2.1.4.0 and 14.1.2.0.0. To exploit it, an attacker must be on the same physical communication segment as the server hosting Enterprise Capture and must rely on interaction from a person other than the attacker (e.g., a user being tricked into an action), which makes remote opportunistic abuse unlikely. Successful attacks result in a complete takeover of Oracle WebCenter Enterprise Capture with high impact to confidentiality, integrity, and availability, and because of a scope change the impact can extend to additional products beyond Enterprise Capture itself (CVSS 3.1 base score 7.9). Organizations running the affected Fusion Middleware versions in document-capture workflows are the impacted population. No public proof of concept is known, the flaw is not in CISA's Known Exploited Vulnerabilities catalog, and no in-the-wild exploitation has been reported.

What to do: Apply the Oracle Critical Patch Update that remediates CVE-2026-83022 to all WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 installations as soon as it is released. Until patched, segment the network and use host firewalls to restrict which clients can reach Enterprise Capture client-server communication ports, and treat users on those segments as untrusted given the UI:R requirement. Review Enterprise Capture logs for anomalous client-bundle sessions or unexpected administrative activity following any suspicious user interaction.