Vulnerability in Oracle Production Scheduling of Oracle E-Business Suite
CVE-2026-62518

7.6HIGH

Key Information:

Vendor

Oracle
Status
Oracle Production Scheduling
Vendor
CVE Published:
21 July 2026

What is CVE-2026-62518?

A vulnerability exists in the Oracle Production Scheduling component of Oracle E-Business Suite, specifically affecting versions ranging from 12.2.3 to 12.2.15. This flaw can be exploited by low-privileged attackers who have network access through HTTP, enabling them to compromise the Oracle Production Scheduling system. Successful exploitation may lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to sensitive information. Furthermore, it carries the potential to partially disrupt the service, posing significant risks to data confidentiality, integrity, and availability.

Affected Version(s)

Oracle Production Scheduling 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
7.6
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.