CVE-2026-83022

Analyzed Analyzed - Analysis Complete

Oracle WebCenter Capture Remote Code Execution

Publication date: 2026-09-15

Last updated on: 2026-09-22

Assigner: Oracle

Description

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle WebCenter Enterprise Capture executes to compromise Oracle WebCenter Enterprise Capture. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 7.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-22

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-83022

EUVD

EUVD-2026-79350

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	webcenter_enterprise_capture	12.2.1.4.0
oracle	webcenter_enterprise_capture	14.1.2.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle WebCenter Enterprise Capture, a product under Oracle Fusion Middleware. It affects versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows an unauthenticated attacker with access to the physical network segment where the software runs to potentially compromise it. Exploitation requires human interaction from someone other than the attacker and could lead to a full takeover of the system.

Detection Guidance

Detection requires identifying Oracle WebCenter Enterprise Capture versions 12.2.1.4.0 or 14.1.2.0.0 on your system. Check installed software using commands like 'rpm -qa | grep oracle-webcenter' or 'dpkg -l | grep oracle-webcenter' depending on your OS. Verify network segments for unauthorized physical access to the hardware running this component.

Impact Analysis

If exploited, this vulnerability could allow an attacker to take over Oracle WebCenter Enterprise Capture. This could lead to unauthorized access, data breaches, or disruption of services relying on this software. The impact includes confidentiality, integrity, and availability of the system being compromised.

Compliance Impact

This vulnerability could potentially lead to unauthorized access or takeover of Oracle WebCenter Enterprise Capture, which may compromise the confidentiality, integrity, and availability of sensitive data processed by the system. Such breaches could impact compliance with regulations like GDPR or HIPAA, depending on the data handled.

Mitigation Strategies

Apply Oracle's official security patches for Oracle WebCenter Enterprise Capture immediately. Isolate the affected hardware from untrusted physical network segments. Restrict physical access to the system to authorized personnel only. Monitor for unusual activity in the Oracle WebCenter Enterprise Capture logs.

Hi! I’m here to help you understand CVE-2026-83022. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70