What is the CVSS score of CVE-2026-35283?

CVE-2026-35283 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.5%.

Oracle WebCenter Enterprise Capture CVE-2026-35283

EUVD-2026-37412 CRITICAL

Improper Access Control (CWE-284)

2026-06-16 oracle

Oracle Authentication Bypass Oracle Webcenter Enterprise Capture

9.9

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

vuln.today AI

9.9 CRITICAL

T3/IIOP reachable over network (AV:N), trivially exploitable (AC:L), needs a low-privileged Capture account (PR:L), no user interaction, and scope change to adjacent Fusion Middleware with full CIA impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (oracle).

CVSS VectorVendor: oracle

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Jun 22, 2026 - 06:03 cve.org

CRITICAL 9.9

Analysis Generated

Jun 16, 2026 - 21:26 vuln.today

DescriptionCVE.org

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

AnalysisAI

Remote takeover of Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 is possible via the Client Bundle component, where a low-privileged attacker with T3/IIOP network access can fully compromise the product with a scope-changed impact on adjacent Fusion Middleware components. The 9.9 CVSS score reflects easy exploitability with high confidentiality, integrity, and availability impact, though there is no public exploit identified at time of analysis. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Obtain low-privileged Capture account

Delivery

Reach T3/IIOP listener on managed server

Exploit

Invoke vulnerable Client Bundle operation

Execution

Achieve remote code execution in Capture context

Persist

Pivot across scope boundary in Fusion Middleware

Impact

Full takeover and data compromise

Access

Obtain low-privileged Capture account

Delivery

Reach T3/IIOP listener on managed server

Exploit

Invoke vulnerable Client Bundle operation

Execution

Achieve remote code execution in Capture context

Persist

Pivot across scope boundary in Fusion Middleware

Impact

Full takeover and data compromise

Vulnerability AssessmentAI

Exploitation	Attacker must have network reachability to the WebCenter Enterprise Capture managed server on its T3 (default 7001/7002) or IIOP listener ports and must hold a low-privileged authenticated account on the product (CVSS PR:L). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H combined with the 9.9 base score makes this an urgent issue: network reachable, low complexity, only low privileges required, no user interaction, and a scope change that can pivot into other Fusion Middleware products. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker with valid low-privileged credentials (for example, a captured operator account or a compromised internal user) opens a T3 or IIOP connection to the WebCenter Enterprise Capture managed server and invokes a vulnerable Client Bundle operation that leads to remote takeover. Due to the scope change, the attacker pivots from the Capture context into other Fusion Middleware components running on the same WebLogic domain, achieving full confidentiality, integrity, and availability impact. …
Remediation	Apply the fixes published in Oracle's June 2026 Critical Patch Update for Fusion Middleware (https://www.oracle.com/security-alerts/cspujun2026.html) to Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 - patch availability per vendor advisory; exact patched build numbers should be taken directly from the CPU bulletin. … Detailed patch versions, workarounds, and compensating controls in full report.