CVE-2026-83431: Medium severity Oracle Oracle Product Workbench vulnerability
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Workbench. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Product Workbench, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Product Workbench accessible data as well as unauthorized read access to a subset of Oracle Product Workbench accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle E-Business Suite - Oracle Product Workbench (WebUI)to a version that resolves this vulnerability.Fixed in 12.2.15
Event History
Frequently Asked Questions
Which deployments are affected?
Oracle Product Workbench WebUI in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected.
What access does an attacker need to exploit this issue?
The attacker needs network access to the affected product over HTTP and must already have low-level privileges. Exploitation also requires interaction by another person.
What could a successful attack allow?
A successful attack can allow unauthorized reading of a subset of accessible Oracle Product Workbench data, as well as unauthorized updates, inserts, or deletions of some accessible data. The impact may significantly extend to additional products because the vulnerability has scope change.