A vulnerability exists in the Oracle WebCenter Enterprise Capture product (component: Client Bundle) affecting versions 12.2.1.4.0 and 14.1.2.0.0. This vulnerability requires a low privileged attacker with logon access and user interaction from another person to exploit. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Oracle WebCenter Enterprise Capture, with confidentiality and integrity impacts rated high. The vulnerability has a CVSS 3.1 base score of 7.2. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update advisory.