CVE-2026-62478
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Vulnerability in Oracle Public Sector Financials (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise the system.
Risk Assessment
Risk of full takeover of the public sector financial system, potentially leading to data breach and service disruption.
Recommendation
Apply the patch provided by Oracle for versions 12.2.3-12.2.15.
Other vulnerabilities in Oracle Public Sector Financials
See all- CVE-2026-60931High
Vulnerability in Oracle Public Sector Financials (Internal Operations component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the system, but exploitation is difficult.
- CVE-2026-60927High
Vulnerability in Oracle Public Sector Financials (Internal Operations component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the system, but exploitation is difficult.
Original NVD description (English source)
Vulnerability in the Oracle Public Sector Financials product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Public Sector Financials. Successful attacks of this vulnerability can result in takeover of Oracle Public Sector Financials. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).