CVE-2026-83451
HighCVSS 8.5Summary
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to compromise the product, and attacks may significantly impact additional products (scope change).
Risk Assessment
A low privileged attacker can take over Oracle Product Workbench, with potential impact on other products. Affects confidentiality, integrity, and availability.
Recommendation
Apply the fix for Oracle E-Business Suite. Restrict network access and grant minimal privileges to users.
Other vulnerabilities in Oracle Product Workbench
See all- CVE-2026-83434High
Vulnerability in Oracle Product Workbench of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Product Workbench, leading to unauthorized access and modification of data. CVSS 8.1.
- CVE-2026-83431Medium
Vulnerability in Oracle E-Business Suite Oracle Product Workbench product (component: WebUI) affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP and user interaction can gain unauthorized update, insert, delete, and read access to some data, and attacks may impact additional products.
- CVE-2026-83430High
Vulnerability in Oracle Product Workbench of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low privileged attacker with network access via HTTP can compromise Oracle Product Workbench, leading to unauthorized access and modification of data. CVSS 8.1.
- CVE-2026-61269Medium
Vulnerability in the WebUI component of Oracle Product Workbench (Oracle E-Business Suite). A low-privileged attacker via HTTP can perform unauthorized updates, inserts, deletions, read access, and cause a partial denial of service.
Original NVD description (English source)
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Workbench. While the vulnerability is in Oracle Product Workbench, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Product Workbench. CVSS 3.1 Base Score 8.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H).