Threats Tagged 'cve-2026-83004'

A vulnerability exists in the Oracle WebCenter Enterprise Capture product (component: Client Bundle) affecting versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability requires a low privileged attacker with logon access and user interaction from another person to exploit. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Oracle WebCenter Enterprise Capture, with confidentiality and integrity impacts rated high. The vulnerability has a CVSS 3.1 base score of 7.2. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update advisory.

CVE-2026-83004 is a high-severity vulnerability in Oracle WebCenter Enterprise Capture versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with logon access to the infrastructure to compromise the product, requiring human interaction from a third party. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data and complete access to all data accessible by Oracle WebCenter Enterprise Capture. The vulnerability has a CVSS 3.1 base score of 7.2, indicating significant confidentiality and integrity impacts. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update advisory.