A vulnerability in Oracle WebCenter Enterprise Capture (component: Client Bundle) affects versions 12.2.1.4.0 and 14.1.2.0.0. It requires an attacker to have access to the physical communication segment and involves user interaction from a third party. Successful exploitation can lead to full takeover of the product and may impact additional Oracle products. The vulnerability has a CVSS 3.1 base score of 7.9, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.