Threats affecting pkg:maven/com.oracle.ebusinesssuite/product-workbench

A vulnerability exists in the Oracle Product Workbench component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. This vulnerability allows a low privileged attacker with network access via HTTP to potentially take over the Oracle Product Workbench. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 8.5. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.