中文

// CVE · PUBLISHED 2026-07-21

CVE-2026-61100

Oracle Corporation / Oracle WebCenter Enterprise Capture

9.8 · CVSS 3.1Critical

Description

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Enterprise Capture. Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

References

Related CVEs

  • CVE-2026-61140Oracle Corporation / Oracle WebCenter SitesCVSS 9.8
  • CVE-2026-61131Oracle Corporation / Oracle Commerce PlatformCVSS 9.8
  • CVE-2026-61130Oracle Corporation / Oracle Commerce PlatformCVSS 9.1
  • CVE-2026-61129Oracle Corporation / Oracle Commerce PlatformCVSS 9.8
  • CVE-2026-61097Oracle Corporation / Oracle Banking Trade Finance Process ManagementCVSS 9.6
  • CVE-2026-61076Oracle Corporation / PeopleSoft Enterprise HCM Talent Acquisition ManagerCVSS 9.9
  • CVE-2026-61072Oracle Corporation / PeopleSoft Enterprise FIN Staffing Front Office BrazilCVSS 9.9
  • CVE-2026-61065Oracle Corporation / Oracle Access ManagerCVSS 9.8

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.