CVE-2026-46779: Critical severity Oracle Oracle WebCenter Enterprise Capture vulnerability
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3 to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to the T3 protocol for Oracle WebCenter Enterprise Capture. Block or limit T3 access at the network perimeter and via internal ACLs/firewalls to trusted hosts only, or isolate the affected service until a vendor fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46779?
CVE-2026-46779 has a critical severity rating of 9.9.
How do I fix CVE-2026-46779?
To fix CVE-2026-46779, upgrade to the latest patched version of Oracle WebCenter Enterprise Capture.
What products are affected by CVE-2026-46779?
Oracle WebCenter Enterprise Capture versions 12.2.1.4.0 and 14.1.2.0.0 are affected by CVE-2026-46779.
What type of attacker can exploit CVE-2026-46779?
A low privileged attacker with network access via T3 can exploit CVE-2026-46779.
What impact does CVE-2026-46779 have on Oracle WebCenter Enterprise Capture?
CVE-2026-46779 allows unauthorized access to confidentiality, integrity, and availability of Oracle WebCenter Enterprise Capture.