CVE-2026-62525
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A vulnerability in Oracle Quality (Oracle E-Business Suite) versions 12.2.3-12.2.15 allows a low-privileged attacker with network access via HTTP to gain unauthorized read, update, insert, or delete access to some data and cause a partial denial of service.
Risk Assessment
The risk includes compromise of confidentiality, integrity, and availability of data in the Oracle Quality module, potentially affecting quality management processes.
Recommendation
Apply Oracle patches and restrict network access to the system.
Other vulnerabilities in Oracle Quality
See all- CVE-2026-60855High
Vulnerability in Oracle Quality (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, but a low-privileged attacker with network access via HTTP can take over Oracle Quality.
- CVE-2026-60854High
Vulnerability in Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Affected versions 12.2.3-12.2.15. A high-privileged attacker with network access via HTTP can easily exploit this, leading to unauthorized access to critical data, full access to all Oracle Quality data, unauthorized update/insert/delete of some data, and partial denial of service. Attacks may impact additional products (scope change). CVSS 8.2 (Confidentiality, Integrity, Availability).
- CVE-2026-46952High
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations) affects versions 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality.
- CVE-2026-46951High
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations) allows a low privileged attacker with network access via HTTP to compromise Oracle Quality. This vulnerability can be easily exploited in versions 12.2.3-12.2.15.
Original NVD description (English source)
Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Quality Workbench HTML system). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quality. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Quality accessible data as well as unauthorized read access to a subset of Oracle Quality accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Quality. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).