CVE-2026-46778

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Enterprise Capture versions 12.2.1.4.0 Oracle WebCenter Enterprise Capture versions 14.1.2.0.0

Description An issue in the Client Bundle component of Oracle WebCenter Enterprise Capture allows an unauthenticated attacker with network access via RMI (Remote Method Invocation, a Java API that allows an object to invoke methods on an object running in another JVM) to compromise the system. Successful exploitation can result in a full takeover of Oracle WebCenter Enterprise Capture and may significantly impact additional products due to a scope change.

Recommendations Apply the June 2026 CPU for version 12.2.1.4.0. Apply the June 2026 CPU for version 14.1.2.0.0.