Threats Tagged 'cve-2026-83022'

A vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It requires an attacker to have access to the physical communication segment and involves user interaction from a third party. Successful exploitation can lead to full takeover of the product and may impact additional Oracle products. The vulnerability has a CVSS 3.1 base score of 7.9, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.

CVE-2026-83022 is a high-severity vulnerability in Oracle WebCenter Enterprise Capture versions 12.2.1.4.0 and 14.1.2.0.0. It allows an unauthenticated attacker with physical access to the communication segment of the hardware running the product to compromise it. Successful exploitation requires human interaction from a third party and can lead to full takeover of the product, potentially impacting other Oracle products as well. The vulnerability has a CVSS 3.1 base score of 7.9, indicating significant confidentiality, integrity, and availability impacts. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes patches for this and many other vulnerabilities across multiple products.