A vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It allows a low privileged attacker with network access via HTTP to potentially take over the product. The vulnerability has a high CVSS 3.1 base score of 8.8, impacting confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in its September 2026 Critical Security Patch Update.