# Oracle WebCenter Enterprise Capture vulnerabilities

Source: https://junglewise.ai/threats/technologies/webcenter-enterprise-capture  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/webcenter-enterprise-capture.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 43 vulnerabilities in Oracle WebCenter Enterprise Capture: 0 in the last 7 days and 19 in the last 90 days, 30 of them critical and 0 exploited in the wild. The most recent, CVE-2026-83339, was published on 15 September 2026. Nothing in the last four weeks, down from 12 vulnerabilities in the four before. 0 critical against 2.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 19
- All time: 43 (30 critical, 0 exploited in the wild)

## About Oracle WebCenter Enterprise Capture

WebCenter Enterprise Capture is an application for automating the ingestion of paper and electronic documents.

## Latest Oracle WebCenter Enterprise Capture vulnerabilities

- [CVE-2026-83339: Oracle WebCenter Enterprise Capture unauthenticated remote code execution](https://junglewise.ai/threats/cve-2026-83339-oracle-webcenter-enterprise-capture-unauthenticated-remote-code) (critical, CVSS 9.8, published 15 Sep 2026)
- [CVE-2026-83022: Oracle WebCenter Enterprise Capture privilege escalation in Client Bundle](https://junglewise.ai/threats/cve-2026-83022-oracle-webcenter-enterprise-capture-privilege-escalation-in) (high, CVSS 7.9, published 15 Sep 2026)
- [CVE-2026-83013: Oracle WebCenter Enterprise Capture privilege escalation in Client Bundle](https://junglewise.ai/threats/cve-2026-83013-oracle-webcenter-enterprise-capture-privilege-escalation-in) (high, CVSS 8.8, published 15 Sep 2026)
- [CVE-2026-83012: Oracle WebCenter Enterprise Capture unauthorized data access in Client Bundle](https://junglewise.ai/threats/cve-2026-83012-oracle-webcenter-enterprise-capture-unauthorized-data-access-in) (high, CVSS 7.7, published 15 Sep 2026)
- [CVE-2026-83010: Oracle WebCenter Enterprise Capture authorization bypass in Client Bundle](https://junglewise.ai/threats/cve-2026-83010-oracle-webcenter-enterprise-capture-authorization-bypass-in) (high, CVSS 8.1, published 15 Sep 2026)
- [CVE-2026-83009: Oracle WebCenter Enterprise Capture privilege escalation in Client Bundle](https://junglewise.ai/threats/cve-2026-83009-oracle-webcenter-enterprise-capture-privilege-escalation-in) (high, CVSS 8.8, published 15 Sep 2026)
- [CVE-2026-83008: Oracle WebCenter Enterprise Capture privilege escalation in Client Bundle](https://junglewise.ai/threats/cve-2026-83008-oracle-webcenter-enterprise-capture-privilege-escalation-in) (high, CVSS 8.8, published 15 Sep 2026)
- [CVE-2026-83007: Oracle WebCenter Enterprise Capture privilege escalation in Client Bundle](https://junglewise.ai/threats/cve-2026-83007-oracle-webcenter-enterprise-capture-privilege-escalation-in) (high, CVSS 8.5, published 15 Sep 2026)
- [CVE-2026-83006: Oracle WebCenter Enterprise Capture privilege escalation in Client Bundle](https://junglewise.ai/threats/cve-2026-83006-oracle-webcenter-enterprise-capture-privilege-escalation-in) (critical, CVSS 9.1, published 15 Sep 2026)
- [CVE-2026-83005: Oracle WebCenter Enterprise Capture privilege escalation in Client Bundle](https://junglewise.ai/threats/cve-2026-83005-oracle-webcenter-enterprise-capture-privilege-escalation-in) (high, CVSS 8.8, published 15 Sep 2026)
- [CVE-2026-83004: Oracle WebCenter Enterprise Capture privilege escalation in Client Bundle](https://junglewise.ai/threats/cve-2026-83004-oracle-webcenter-enterprise-capture-privilege-escalation-in) (high, CVSS 7.2, published 15 Sep 2026)
- [CVE-2026-83003: Oracle WebCenter Enterprise Capture privilege escalation in Client Bundle](https://junglewise.ai/threats/cve-2026-83003-oracle-webcenter-enterprise-capture-privilege-escalation-in) (high, CVSS 8.5, published 15 Sep 2026)
- [CVE-2026-60971: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client…](https://junglewise.ai/threats/cve-2026-60971-vulnerability-in-the-oracle-webcenter-enterprise-capture-product) (critical, CVSS 9.8, published 18 Aug 2026)
- [CVE-2026-60970: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client…](https://junglewise.ai/threats/cve-2026-60970-vulnerability-in-the-oracle-webcenter-enterprise-capture-product) (critical, CVSS 9.8, published 18 Aug 2026)
- [CVE-2026-60958: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client…](https://junglewise.ai/threats/cve-2026-60958-vulnerability-in-the-oracle-webcenter-enterprise-capture-product) (critical, CVSS 9.8, published 18 Aug 2026)
- [CVE-2026-60947: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client…](https://junglewise.ai/threats/cve-2026-60947-vulnerability-in-the-oracle-webcenter-enterprise-capture-product) (critical, CVSS 9.8, published 18 Aug 2026)
- [CVE-2026-60946: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client…](https://junglewise.ai/threats/cve-2026-60946-vulnerability-in-the-oracle-webcenter-enterprise-capture-product) (critical, CVSS 9.8, published 18 Aug 2026)
- [CVE-2026-60921: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client…](https://junglewise.ai/threats/cve-2026-60921-vulnerability-in-the-oracle-webcenter-enterprise-capture-product) (critical, CVSS 9.8, published 18 Aug 2026)
- [CVE-2026-60916: Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client…](https://junglewise.ai/threats/cve-2026-60916-vulnerability-in-the-oracle-webcenter-enterprise-capture-product) (critical, CVSS 9.9, published 18 Aug 2026)
- [CVE-2026-61100: Oracle WebCenter Enterprise Capture remote compromise in Client Bundle](https://junglewise.ai/threats/cve-2026-61100-oracle-webcenter-enterprise-capture-remote-compromise-in-client) (critical, CVSS 9.8, published 21 Jul 2026)
- [CVE-2026-61099: Oracle WebCenter Enterprise Capture takeover in Client Bundle](https://junglewise.ai/threats/cve-2026-61099-oracle-webcenter-enterprise-capture-takeover-in-client-bundle) (high, CVSS 8.8, published 21 Jul 2026)
- [CVE-2026-61098: Oracle WebCenter Enterprise Capture takeover in Client Bundle](https://junglewise.ai/threats/cve-2026-61098-oracle-webcenter-enterprise-capture-takeover-in-client-bundle) (high, CVSS 8.8, published 21 Jul 2026)
- [CVE-2026-61092: Oracle WebCenter Enterprise Capture takeover in Client Bundle](https://junglewise.ai/threats/cve-2026-61092-oracle-webcenter-enterprise-capture-takeover-in-client-bundle) (high, CVSS 8.1, published 21 Jul 2026)
- [CVE-2026-60524: Oracle WebCenter Enterprise Capture remote takeover in Client Bundle](https://junglewise.ai/threats/cve-2026-60524-oracle-webcenter-enterprise-capture-remote-takeover-in-client) (critical, CVSS 9.9, published 21 Jul 2026)
- [CVE-2026-60461: Oracle WebCenter Enterprise Capture remote code execution in Client Bundle](https://junglewise.ai/threats/cve-2026-60461-oracle-webcenter-enterprise-capture-remote-code-execution-in) (critical, CVSS 9.9, published 21 Jul 2026)

## Most severe Oracle WebCenter Enterprise Capture vulnerabilities

- [CVE-2026-46781: Oracle WebCenter Enterprise Capture auth bypass in Client Bundle](https://junglewise.ai/threats/cve-2026-46781-oracle-webcenter-enterprise-capture-auth-bypass-in-client-bundle) (critical, CVSS 10, published 17 Jun 2026)
- [CVE-2026-46778: Oracle WebCenter Enterprise Capture auth bypass in Client Bundle](https://junglewise.ai/threats/cve-2026-46778-oracle-webcenter-enterprise-capture-auth-bypass-in-client-bundle) (critical, CVSS 10, published 17 Jun 2026)
- [CVE-2026-46782: Oracle WebCenter Enterprise Capture access control bypass in Client Bundle](https://junglewise.ai/threats/cve-2026-46782-oracle-webcenter-enterprise-capture-access-control-bypass-in) (critical, CVSS 9.9, published 17 Jun 2026)
- [CVE-2026-46779: Oracle WebCenter Enterprise Capture access control bypass in Client Bundle](https://junglewise.ai/threats/cve-2026-46779-oracle-webcenter-enterprise-capture-access-control-bypass-in) (critical, CVSS 9.9, published 17 Jun 2026)
- [CVE-2026-35280: Oracle WebCenter Enterprise Capture access control bypass in Client Bundle](https://junglewise.ai/threats/cve-2026-35280-oracle-webcenter-enterprise-capture-access-control-bypass-in) (critical, CVSS 9.9, published 17 Jun 2026)
- [CVE-2026-35285: Oracle WebCenter Enterprise Capture access control bypass in Client Bundle](https://junglewise.ai/threats/cve-2026-35285-oracle-webcenter-enterprise-capture-access-control-bypass-in) (critical, CVSS 9.9, published 17 Jun 2026)
- [CVE-2026-35284: Oracle WebCenter Enterprise Capture access control bypass in Client Bundle](https://junglewise.ai/threats/cve-2026-35284-oracle-webcenter-enterprise-capture-access-control-bypass-in) (critical, CVSS 9.9, published 17 Jun 2026)
- [CVE-2026-35283: Oracle WebCenter Enterprise Capture access control bypass in Client Bundle](https://junglewise.ai/threats/cve-2026-35283-oracle-webcenter-enterprise-capture-access-control-bypass-in) (critical, CVSS 9.9, published 17 Jun 2026)
- [CVE-2026-35282: Oracle WebCenter Enterprise Capture improper access control in Client Bundle](https://junglewise.ai/threats/cve-2026-35282-oracle-webcenter-enterprise-capture-improper-access-control-in) (critical, CVSS 9.9, published 17 Jun 2026)
- [CVE-2026-35281: Oracle WebCenter Enterprise Capture access control bypass in Client Bundle](https://junglewise.ai/threats/cve-2026-35281-oracle-webcenter-enterprise-capture-access-control-bypass-in) (critical, CVSS 9.9, published 17 Jun 2026)

## Vulnerabilities per week

Nothing in the last four weeks, down from 12 vulnerabilities in the four before. 0 critical against 2.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 7 | 7 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 12 | 2 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other Oracle technologies

- [Oracle MySQL Server](https://junglewise.ai/threats/technologies/mysql-server): 163 vulnerabilities
- [Oracle Hyperion Financial Management](https://junglewise.ai/threats/technologies/hyperion-financial-management): 142 vulnerabilities
- [Oracle Helidon](https://junglewise.ai/threats/technologies/helidon): 130 vulnerabilities
- [Oracle MySQL Cluster](https://junglewise.ai/threats/technologies/mysql-cluster): 129 vulnerabilities
- [Oracle Coherence](https://junglewise.ai/threats/technologies/coherence): 113 vulnerabilities
- [Oracle E-Business Suite](https://junglewise.ai/threats/technologies/e-business-suite): 110 vulnerabilities
- [Oracle WebCenter Content](https://junglewise.ai/threats/technologies/webcenter-content): 110 vulnerabilities
- [Oracle Commerce Guided Search](https://junglewise.ai/threats/technologies/commerce-guided-search): 104 vulnerabilities
- [Oracle Commerce Experience Manager](https://junglewise.ai/threats/technologies/commerce-experience-manager): 102 vulnerabilities
- [Oracle JD Edwards EnterpriseOne Tools](https://junglewise.ai/threats/technologies/jd-edwards-enterpriseone-tools): 101 vulnerabilities
- [Oracle PeopleSoft Enterprise PeopleTools](https://junglewise.ai/threats/technologies/peopletools): 101 vulnerabilities
- [Oracle Java SE](https://junglewise.ai/threats/technologies/java-se): 92 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Oracle WebCenter Enterprise Capture vulnerabilities", https://junglewise.ai/threats/technologies/webcenter-enterprise-capture, 9 November 2026.
