A vulnerability exists in Oracle WebCenter Enterprise Capture (component: Client Bundle) versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to unauthorized access to critical data. The vulnerability has a CVSS 3.1 base score of 7.7, indicating high severity with significant confidentiality impact. Oracle has released security patches addressing this vulnerability as part of its September 2026 Critical Security Patch Update.