Executive brief
A vulnerability exists in the Internal Operations component of Oracle Process Manufacturing Process Execution, a tool used by manufacturers to manage production workflows within the Oracle E-Business Suite. A low-privileged user could exploit this flaw over the network to gain full control of the application. A successful attack could lead to a complete loss of data confidentiality, integrity, and service availability, potentially disrupting manufacturing operations and exposing sensitive production data.
Technical details
This vulnerability affects the Internal Operations component of Oracle Process Manufacturing Process Execution version 12.2.15. It is classified as difficult to exploit (Attack Complexity: High), requiring the attacker to have low-level privileges and network access via HTTP. A successful exploit allows for a complete takeover of the affected product, impacting confidentiality, integrity, and availability (all rated High). The vulnerability was disclosed as part of the Oracle Critical Patch Update for July 2026. Security engineers should apply the relevant patches from Oracle to mitigate the risk of unauthorized application compromise.
Affected products
- Oracle Corporation Oracle Process Manufacturing Process Execution 12.2.15
Timeline
- 2026-07-21: advisory: Published by Oracle and NVD