CVE-2026-47031 affects Oracle Bills of Material in Oracle E-Business Suite versions 12.2.3 through 12.2.15. It is an easily exploitable vulnerability that allows an attacker with low privileges and network access via HTTP to compromise the affected component. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 score of 8.8. Oracle's July 2026 Critical Patch Update advisory references a large set of security patches across many Oracle products but does not explicitly confirm patch availability or remediation level for this specific vulnerability. The advisory emphasizes the importance of applying patches without delay to prevent exploitation.

Successful exploitation of this vulnerability can lead to complete compromise of the Oracle Bills of Material component, affecting confidentiality, integrity, and availability. This could allow an attacker to take over the affected system component, potentially leading to unauthorized access and control over sensitive business data managed by Oracle Bills of Material.

Oracle has released a Critical Patch Update advisory in July 2026 that addresses numerous vulnerabilities across Oracle products. Although the advisory does not explicitly confirm a patch for CVE-2026-47031, it strongly recommends customers remain on actively supported versions and apply security patches promptly. Organizations using affected versions of Oracle Bills of Material (12.2.3 through 12.2.15) should monitor Oracle's official security alerts and apply the relevant Critical Patch Updates as soon as they become available. Patch status is not yet confirmed for this specific vulnerability—check the vendor advisory for current remediation guidance.