Executive brief
A vulnerability exists in the Internal Operations component of Oracle Process Manufacturing Systems, a tool used by manufacturers to manage production and supply chains. An attacker with basic user access can exploit this flaw over the network to view, modify, or delete sensitive business data. This could lead to significant operational disruptions or the exposure of proprietary manufacturing information.
Technical details
This vulnerability affects the Internal Operations component of Oracle Process Manufacturing Systems within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It is classified as an easily exploitable flaw that requires low-privileged authentication and is reachable via HTTP over the network. Successful exploitation allows an attacker to achieve high confidentiality and integrity impacts, including the unauthorized creation, deletion, or modification of all accessible data within the system. The vulnerability does not impact system availability (A:N). Users should refer to the Oracle Critical Patch Update for July 2026 for remediation steps.
Affected products
- Oracle E-Business Suite (Oracle Process Manufacturing Systems) 12.2.3 - 12.2.15
Timeline
- 2026-07-21: disclosed
- 2026-07-21: advisory: Oracle July 2026 Critical Patch Update published