This vulnerability in Oracle Flow Manufacturing (component: Internal Operations) affects version 12.2.7. It is easily exploitable by an attacker with low privileges and network access via HTTP. The CVSS 3.1 base score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability. The vulnerability allows an attacker to compromise and take over Oracle Flow Manufacturing. The vendor advisory from Oracle (July 2026 Critical Patch Update) references multiple patches but does not explicitly confirm a patch for this specific vulnerability. The advisory strongly recommends applying available patches promptly.

A successful attack can result in complete compromise of Oracle Flow Manufacturing, affecting confidentiality, integrity, and availability of the system. This could allow an attacker to take over the affected product, potentially leading to unauthorized access and control over manufacturing operations.

Oracle's July 2026 Critical Patch Update advisory recommends applying security patches without delay. Although the advisory does not explicitly confirm a patch for CVE-2026-62498, it is part of the cumulative security updates. Organizations should review the July 2026 Critical Patch Update documentation and apply all relevant patches for Oracle Flow Manufacturing version 12.2.7 promptly to mitigate this vulnerability. Patch status is not yet confirmed explicitly for this CVE; therefore, check the vendor advisory for current remediation guidance.