Executive brief
A vulnerability exists in the Internal Operations component of Oracle Process Manufacturing Financials, a tool used by businesses to manage manufacturing costs and financial reporting. An attacker with basic user access can exploit this flaw over the network to view, modify, or delete sensitive financial data. This could lead to significant data breaches, financial inaccuracies, or unauthorized changes to critical business records.
Technical details
This vulnerability affects the Internal Operations component of Oracle Process Manufacturing Financials within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It is classified as an easily exploitable flaw that requires low-privileged user credentials and network access via HTTP. An attacker can achieve full confidentiality and integrity impacts, allowing for the unauthorized viewing or manipulation of all accessible data within the module. The vulnerability does not impact availability. Users are advised to refer to the Oracle Critical Patch Update for July 2026 for remediation steps.
Affected products
- Oracle E-Business Suite (Oracle Process Manufacturing Financials) 12.2.3-12.2.15
Timeline
- 2026-07-21: disclosed
- 2026-07-21: advisory