Vulnerability in Oracle E-Business Suite Affecting Internal Operations
CVE-2026-62451

8.1HIGH

Key Information:

Vendor

Oracle
Status
Oracle Work In Process
Vendor
CVE Published:
21 July 2026

What is CVE-2026-62451?

A vulnerability in the Oracle Work in Process component of Oracle E-Business Suite (versions 12.2.14 and 12.2.15) could allow attackers with low privileges and network access via HTTP to exploit the system. This easily exploitable flaw can lead to unauthorized creation, deletion, or modification of critical data, granting attackers extensive access to all accessible data within Oracle Work in Process. Organizations are advised to strengthen their security measures to prevent potential data breaches.

Affected Version(s)

Oracle Work in Process 12.2.14 <= 12.2.15

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.