Vulnerability in Oracle Applications Framework Affects Oracle E-Business Suite
CVE-2026-62546

9.1CRITICAL

Key Information:

Vendor

Oracle
Status
Oracle Applications Framework
Vendor
CVE Published:
21 July 2026

What is CVE-2026-62546?

A security vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite permits high-privileged attackers with network access via HTTP to exploit the framework. This vulnerability not only affects the Applications Framework but can also impact other products, leading to a potential takeover of the system. It highlights the importance of securing access points to prevent unauthorized exploitation and safeguard sensitive information.

Affected Version(s)

Oracle Applications Framework 12.2.8 <= 12.2.15

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.