CVE-2026-101808

CRÍTICO 9.1CVE-2026-101808 · Published 20/10/2026 · updated 21/10/2026

En resumen

CVE-2026-101808 es una vulnerabilidad CRÍTICO (CVSS 9.1).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.40%, mayor que el 34.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Product Workbench. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Product Workbench accessible data as well as unauthorized access to critical data or complete access to all Oracle Product Workbench accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

References

oracle.com/security-alerts/cpuoct2026.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free