This vulnerability affects Oracle WebCenter Enterprise Capture component of Oracle Fusion Middleware, specifically versions 12.2.1.4.0 and 14.1.2.0.0. It is exploitable remotely without authentication via T3 and IIOP network protocols. Successful exploitation can result in complete compromise of the affected system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. Oracle's August 2026 Critical Security Patch Update includes fixes for this vulnerability among 943 other patches. Oracle strongly recommends applying these patches without delay to prevent exploitation.

An unauthenticated attacker with network access can exploit this vulnerability to take over Oracle WebCenter Enterprise Capture, leading to full compromise of confidentiality, integrity, and availability of the system. This could allow attackers to execute arbitrary code, access sensitive data, or disrupt service.

Oracle has released security patches for this vulnerability as part of the August 2026 Critical Security Patch Update. Users should apply the official patches promptly. Oracle strongly recommends remaining on actively supported versions and applying security patches without delay to prevent exploitation. No alternative mitigations or workarounds are specified in the advisory.