Executive brief
A vulnerability exists in Oracle Flow Manufacturing, a component of the Oracle E-Business Suite used by organizations to manage production lines and manufacturing workflows. An attacker with basic user access to the corporate network can exploit this flaw to take full control of the manufacturing system. This could lead to the theft of sensitive production data, disruption of manufacturing operations, or unauthorized changes to internal business processes.
Technical details
This vulnerability affects the Internal Operations component of Oracle Flow Manufacturing within the Oracle E-Business Suite. It is classified as an easily exploitable flaw that requires low-privileged authentication and network connectivity via HTTP. While the specific CWE is not identified in the advisory, the impact is rated as high for confidentiality, integrity, and availability, potentially leading to a complete takeover of the affected component. The vulnerability is present in versions 12.2.7 through 12.2.15. Security updates are typically provided via the Oracle Critical Patch Update (CPU) program.
Affected products
- Oracle Flow Manufacturing 12.2.7-12.2.15
Timeline
- 2026-07-21: advisory: Initial publication by Oracle and NVD