Oracle E-Business Suite Vulnerability in Advanced Benefits Component
CVE-2026-62542

6.3MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Advanced Benefits
Vendor
CVE Published:
21 July 2026

What is CVE-2026-62542?

A vulnerability in the Oracle Advanced Benefits component of Oracle E-Business Suite allows low-privileged attackers with network access via HTTP to exploit the system. This weakness enables unauthorized updates, inserts, or deletions to accessible data. Furthermore, it can provide an attacker with unauthorized read access to certain data, potentially leading to a partial denial of service (DoS). Because the affected versions have minimal access controls, exploiting this vulnerability poses significant risks to data confidentiality, integrity, and availability.

Affected Version(s)

Oracle Advanced Benefits 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.