CVE-2026-35280: Critical severity Oracle Oracle WebCenter Enterprise Capture vulnerability
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Oracle WebCenter Enterprise Capture (Client Bundle)from your environment.If the product is not required, uninstall Oracle WebCenter Enterprise Capture (Client Bundle) from affected systems to eliminate the vulnerable component.
- Configuration
Disable or restrict T3 and IIOP listeners/services on hosts running Oracle WebCenter Enterprise Capture. If you cannot fully disable them, bind listeners to localhost or restrict them to trusted network interfaces.
Oracle WebCenter Enterprise Capture (Client Bundle) T3/IIOP network access = disabled or restricted - Compensating control
Restrict network access to T3 and IIOP ports at the perimeter and internal firewalls (allow only trusted IPs), apply network segmentation to isolate Oracle WebCenter Enterprise Capture instances, and block T3/IIOP traffic where not required.
- Operational
Assume potential compromise if exposed: perform incident response and forensic analysis, monitor for indicators of compromise, rotate any credentials, API keys, and certificates used by Oracle WebCenter Enterprise Capture, and rebuild or remediate affected hosts as needed.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35280?
The severity of CVE-2026-35280 is rated as critical with a score of 9.9.
How do I fix CVE-2026-35280?
To fix CVE-2026-35280, you should apply the latest patches provided by Oracle for the affected versions of Oracle WebCenter Enterprise Capture.
Who is affected by CVE-2026-35280?
CVE-2026-35280 affects users of Oracle WebCenter Enterprise Capture versions 12.2.1.4.0 and 14.1.2.0.0.
What type of vulnerability is CVE-2026-35280?
CVE-2026-35280 is an easily exploitable vulnerability that allows a low privileged attacker with network access to compromise the system.
What attack vectors are associated with CVE-2026-35280?
CVE-2026-35280 can be exploited via T3 and IIOP protocols.