CVE-2026-60458

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Enterprise Capture versions 12.2.1.4.0 and 14.1.2.0.0

Description A flaw exists in the Client Bundle component of Oracle WebCenter Enterprise Capture due to a lack of authentication for a critical function. A low-privileged attacker with network access via T3 or IIOP (Internet Inter-ORB Protocol, a protocol for communication between objects in a distributed system) can exploit this issue to compromise the system. Successful exploitation can lead to a full takeover of Oracle WebCenter Enterprise Capture and may significantly impact additional products through a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.