Executive brief
A vulnerability exists in the Oracle Process Manufacturing Regulatory Management module of the Oracle E-Business Suite, which is used by organizations to manage compliance and safety data for manufactured goods. An attacker with basic user access to the corporate network could exploit this flaw to take full control of the system. This could lead to the theft of sensitive regulatory data, unauthorized modification of safety records, or a complete shutdown of the manufacturing compliance process.
Technical details
A vulnerability in the Internal Operations component of Oracle Process Manufacturing Regulatory Management (part of Oracle E-Business Suite) allows for a complete system takeover. The flaw is categorized as easily exploitable and requires only low-privileged user credentials. An attacker can execute the exploit over the network via HTTP without any user interaction. Successful exploitation results in a total loss of confidentiality, integrity, and availability (CVSS 8.8). Affected versions range from 12.2.3 through 12.2.15. Users are advised to consult the Oracle Critical Patch Update for July 2026 for remediation steps.
Affected products
- Oracle E-Business Suite (Process Manufacturing Regulatory Management) 12.2.3 - 12.2.15
Timeline
- 2026-07-21: disclosed
- 2026-07-21: advisory