CVE-2026-61335: High severity Oracle Oracle E-Business Suite - Oracle Product Workbench vulnerability
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Workbench. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Product Workbench accessible data as well as unauthorized access to critical data or complete access to all Oracle Product Workbench accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle E-Business Suite - Oracle Product Workbench (Internal Operations)to a version that resolves this vulnerability.Fixed in 12.2.3-12.2.15
Event History
Frequently Asked Questions
What is the severity of CVE-2026-61335?
The severity of CVE-2026-61335 is rated as high with a CVSS score of 8.1.
How do I fix CVE-2026-61335?
To fix CVE-2026-61335, update your Oracle E-Business Suite to the latest patched version.
Who is affected by CVE-2026-61335?
CVE-2026-61335 affects users of Oracle E-Business Suite versions 12.2.3 to 12.2.15.
What type of vulnerability is CVE-2026-61335?
CVE-2026-61335 is an easily exploitable vulnerability that allows a low privileged attacker to compromise Oracle Product Workbench.
What impact can CVE-2026-61335 have on my system?
CVE-2026-61335 can lead to high confidentiality and integrity violations but does not impact availability.