CVE-2026-60445 in WebCenter Enterprise Capture
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability exists within Oracle WebCenter Enterprise Capture, a component of Oracle Fusion Middleware that falls under the Client Bundle category. The affected versions include 12.2.1.4.0 and 14.1.2.0.0, representing critical security gaps in enterprise document capture and processing systems. The vulnerability's exploitation requires minimal privileges and can be executed through network-based attacks leveraging T3 or IIOP protocols, which are commonly used for Java Remote Method Invocation communications within Oracle environments.
The technical flaw stems from insufficient input validation and authentication mechanisms within the WebCenter Enterprise Capture client bundle implementation. Attackers with low privilege access can exploit this weakness to gain full control over the affected system, as evidenced by the CVSS 3.1 score of 9.9 which indicates high severity across all impact vectors including confidentiality, integrity, and availability. The attack vector AV:N (network) combined with AC:L (low complexity) and PR:L (low privileges) demonstrates how accessible this vulnerability is to threat actors who may already have basic network connectivity to the target environment.
The operational impact extends beyond the immediate WebCenter Enterprise Capture system, as indicated by the scope change aspect of this vulnerability. Successful exploitation can compromise additional Oracle products within the same ecosystem, creating cascading security failures that could affect multiple enterprise applications and services. This interconnected impact aligns with common attack patterns documented in the ATT&CK framework where initial access leads to lateral movement and system compromise across related components.
The high confidentiality, integrity, and availability impacts reflect the severity of potential damage that can occur. An attacker who successfully exploits this vulnerability gains complete control over document capture operations, potentially accessing sensitive business documents, modifying capture processes, or disrupting critical enterprise workflows. This vulnerability represents a significant risk to organizations relying on Oracle WebCenter Enterprise Capture for mission-critical document management processes.
Organizations should immediately implement mitigations including network segmentation to restrict access to T3 and IIOP ports, applying available Oracle security patches as soon as they become available, and implementing robust monitoring for suspicious network activity on these protocols. The vulnerability's classification under CWE categories related to insufficient input validation and inadequate authentication mechanisms further emphasizes the need for comprehensive security hardening measures across all Oracle Fusion Middleware components. Security teams should also consider implementing additional access controls and privilege management policies to reduce the attack surface and limit potential damage from such high-severity vulnerabilities.