CVE-2026-61269
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Vulnerability in the WebUI component of Oracle Product Workbench (Oracle E-Business Suite). A low-privileged attacker via HTTP can perform unauthorized updates, inserts, deletions, read access, and cause a partial denial of service.
Risk Assessment
Risk of confidentiality, integrity, and availability breaches in Oracle Product Workbench, potentially impacting business processes.
Recommendation
Apply the latest Oracle security patches for versions 12.2.3-12.2.15 and restrict access to the WebUI interface.
Other vulnerabilities in Oracle Product Workbench
See all- CVE-2026-83451High
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise the product, and attacks may significantly impact additional products (scope change).
- CVE-2026-83434High
Vulnerability in Oracle Product Workbench of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Product Workbench, leading to unauthorized access and modification of data. CVSS 8.1.
- CVE-2026-83431Medium
Vulnerability in Oracle E-Business Suite Oracle Product Workbench product (component: WebUI) affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP and user interaction can gain unauthorized update, insert, delete, and read access to some data, and attacks may impact additional products.
- CVE-2026-83430High
Vulnerability in Oracle Product Workbench of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Product Workbench, leading to unauthorized access and modification of data. CVSS 8.1.
Original NVD description (English source)
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Workbench. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Product Workbench accessible data as well as unauthorized read access to a subset of Oracle Product Workbench accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Product Workbench. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).