CVE-2026-62475

MediumCVSS 6.6

Published: 18/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

32th percentile - higher than 32% of all known CVEs

Summary

Vulnerability in Oracle Shipping Execution (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, but by a high-privileged attacker over HTTP, allowing takeover of the system.

Risk Assessment

Risk of complete takeover of Oracle Shipping Execution, potentially leading to confidentiality, integrity, and availability breach.

Recommendation

Apply Oracle patches and restrict access for high-privileged users.

Original NVD description (English source)

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Shipping Execution. Successful attacks of this vulnerability can result in takeover of Oracle Shipping Execution. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).