This vulnerability affects Oracle Process Manufacturing Process Execution component of Oracle E-Business Suite, specifically version 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The CVSS 3.1 base score is 7.5, indicating high severity, with impacts on confidentiality, integrity, and availability. The attack complexity is high, and no user interaction is required. The vendor advisory from Oracle's July 2026 Critical Patch Update does not explicitly confirm a patch or remediation for this specific vulnerability, though it references a large set of cumulative patches. Customers are advised to consult the advisory for patch availability. There are no known exploits in the wild at this time.

Successful exploitation can result in complete compromise of Oracle Process Manufacturing Process Execution, affecting confidentiality, integrity, and availability of the system. This could allow an attacker to take over the affected product, potentially leading to unauthorized access and control over business-critical manufacturing processes.

Patch status is not yet confirmed — check the Oracle July 2026 Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively-supported versions. Until a patch is confirmed and applied, restrict network access to the affected service to trusted users only to reduce exposure.