What is the CVSS score of EUVD-2026-37412?

EUVD-2026-37412 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.5%.

Oracle WebCenter Enterprise Capture EUVD-2026-37412

| CVE-2026-35283 CRITICAL

Improper Access Control (CWE-284)

2026-06-16 oracle

Authentication Bypass Oracle Oracle Webcenter Enterprise Capture Oracle Corporation

9.9

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

vuln.today AI

9.9 CRITICAL

T3/IIOP reachable over network (AV:N), trivially exploitable (AC:L), needs a low-privileged Capture account (PR:L), no user interaction, and scope change to adjacent Fusion Middleware with full CIA impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (oracle).

CVSS VectorVendor: oracle

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Jun 22, 2026 - 06:03 cve.org

CRITICAL 9.9

Analysis Generated

Jun 16, 2026 - 21:26 vuln.today

DescriptionCVE.org

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise Capture. While the vulnerability is in Oracle WebCenter Enterprise Capture, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebCenter Enterprise Capture. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

AnalysisAI

Remote takeover of Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 is possible via the Client Bundle component, where a low-privileged attacker with T3/IIOP network access can fully compromise the product with a scope-changed impact on adjacent Fusion Middleware components. The 9.9 CVSS score reflects easy exploitability with high confidentiality, integrity, and availability impact, though there is no public exploit identified at time of analysis. Defenders should treat this as a high-priority patching item given the trivial complexity and broad WebLogic protocol exposure typical of Oracle Fusion Middleware deployments.

Technical ContextAI

Oracle WebCenter Enterprise Capture is a document capture and imaging product within the Oracle Fusion Middleware stack, typically deployed on Oracle WebLogic Server. The vulnerable Client Bundle component is reached over T3 (WebLogic's proprietary RMI-style protocol) and IIOP (CORBA's GIOP-based protocol), both of which historically expose Java serialization and remote object invocation surfaces in Fusion Middleware. The CPE confirms cpe:2.3:a:oracle_corporation:oracle_webcenter_enterprise_capture covers the affected installs. No CWE was assigned, but the combination of T3/IIOP vector, low complexity, and scope change is consistent with the well-known class of unsafe deserialization or insufficiently restricted remote method invocation flaws that have plagued WebLogic-based products.

RemediationAI

Apply the fixes published in Oracle's June 2026 Critical Patch Update for Fusion Middleware (https://www.oracle.com/security-alerts/cspujun2026.html) to Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 - patch availability per vendor advisory; exact patched build numbers should be taken directly from the CPU bulletin. Until patching, restrict T3 and IIOP exposure by configuring WebLogic connection filters (weblogic.security.net.ConnectionFilterImpl) to allow T3/T3s/IIOP/IIOPS only from trusted management subnets, and block these protocols at the network perimeter; note this can break legitimate JMS, JNDI, and management clients that rely on T3. Additionally, audit and minimize accounts with WebCenter Capture operator-level access since exploitation only needs PR:L, and monitor WebLogic access logs for anomalous T3/IIOP connections to the Capture managed server.