CVE-2026-83431
MediumCVSS 5.4Summary
Vulnerability in Oracle E-Business Suite Oracle Product Workbench product (component: WebUI) affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP and user interaction can gain unauthorized update, insert, delete, and read access to some data, and attacks may impact additional products.
Risk Assessment
The risk includes confidentiality and integrity breach and potential scope expansion to other products, increasing potential damage.
Recommendation
Apply Oracle patches for Oracle Product Workbench and educate users on security awareness.
Other vulnerabilities in Oracle Product Workbench
See all- CVE-2026-83451High
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise the product, and attacks may significantly impact additional products (scope change).
- CVE-2026-83434High
Vulnerability in Oracle Product Workbench of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Product Workbench, leading to unauthorized access and modification of data. CVSS 8.1.
- CVE-2026-83430High
Vulnerability in Oracle Product Workbench of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Product Workbench, leading to unauthorized access and modification of data. CVSS 8.1.
- CVE-2026-61269Medium
Vulnerability in the WebUI component of Oracle Product Workbench (Oracle E-Business Suite). A low-privileged attacker via HTTP can perform unauthorized updates, inserts, deletions, read access, and cause a partial denial of service.
Original NVD description (English source)
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Workbench. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Product Workbench, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Product Workbench accessible data as well as unauthorized read access to a subset of Oracle Product Workbench accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).