PT-2026-77436

CVE-2026-60958

·

Published

2026-08-18

·

Updated

2026-10-22

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Oracle WebCenter Enterprise Capture version 12.2.1.4.0 Oracle WebCenter Enterprise Capture version 14.1.2.0.0
Description An issue exists in the Client Bundle component of Oracle WebCenter Enterprise Capture. An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, potentially leading to a full takeover of the application.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-284: Improper Access Control
Related identifiers
CVE-2026-60958
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com