THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-60970 (CRITICAL 9.8) — Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via

[NVD] CVE-2026-60970 (CRITICAL 9.8) — Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via

mednvdPublished 2026-08-18

CVE-2026-60970 CVSS: 9.8 CRITICAL Published: 2026-08-18T21:16:49.613

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebCenter Enterprise

Indicators of compromise

CVE-2026-60970cve
12.2.1.4ipv4
14.1.2.0ipv4

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-60970