A vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via SOAP to compromise the product, potentially leading to unauthorized access and modification of critical data. The vulnerability has a high severity with a CVSS 3.1 base score of 8.5. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.