CVE-2026-35282: Critical severity Oracle Oracle WebCenter Enterprise Capture vulnerability
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable T3 and IIOP listeners on the application if possible; otherwise restrict access to these protocols to a minimal set of trusted management IPs (host-based firewall, listener configuration, or application settings).
Oracle WebCenter Enterprise Capture (Client Bundle) T3/IIOP network access = disabled or restricted to trusted hosts - Compensating control
At the network perimeter and internal firewalls, block or tightly restrict T3 and IIOP protocol/ports to prevent network access to Oracle WebCenter Enterprise Capture. Segment or isolate systems running the product from general user networks to reduce exposure and lateral movement.
- Operational
Assume systems exposed to the vulnerability could be compromised. Isolate affected hosts, perform incident response and forensic analysis, verify integrity of the application and related systems, and restore from known-good backups if compromise is confirmed. Monitor for signs of takeover and unauthorized activity.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35282?
CVE-2026-35282 has a critical severity rating of 9.9.
How do I fix CVE-2026-35282?
To fix CVE-2026-35282, upgrade Oracle WebCenter Enterprise Capture to the latest supported version as specified by Oracle.
Who is affected by CVE-2026-35282?
CVE-2026-35282 affects supported versions of Oracle WebCenter Enterprise Capture, specifically 12.2.1.4.0 and 14.1.2.0.0.
What type of attack can exploit CVE-2026-35282?
CVE-2026-35282 can be exploited by a low privileged attacker with network access via T3 or IIOP.
What are the consequences of exploiting CVE-2026-35282?
Exploiting CVE-2026-35282 can lead to complete compromise of the affected system, including loss of confidentiality, integrity, and availability.