This vulnerability affects Oracle Process Manufacturing Regulatory Management within Oracle E-Business Suite, specifically versions 12.2.3 through 12.2.15. It is an easily exploitable vulnerability that allows an attacker with low privileges and network access via HTTP to compromise the product. Successful exploitation can lead to unauthorized access to critical data and unauthorized modification (update, insert, delete) of some accessible data. The vulnerability has a CVSS 3.1 score of 8.5, indicating high severity with significant confidentiality and integrity impacts. The vulnerability also has scope change potential, meaning it may affect additional Oracle products beyond the initially targeted component. Oracle’s July 2026 Critical Patch Update advisory references multiple security patches but does not explicitly confirm a dedicated patch for this CVE. Customers should consult the advisory and apply all relevant patches to address this issue.

Exploitation of this vulnerability can result in unauthorized access to critical data within Oracle Process Manufacturing Regulatory Management and unauthorized modification of some data. The confidentiality impact is high, and integrity impact is low, with no impact on availability. The vulnerability can be exploited remotely over the network via HTTP by an attacker with low privileges, increasing the risk of compromise. Additionally, the vulnerability's scope change characteristic indicates potential impact on other Oracle products beyond the initially affected component.

Oracle has released a Critical Patch Update advisory in July 2026 that addresses multiple security vulnerabilities across Oracle products. Although the advisory does not explicitly confirm a patch specifically for CVE-2026-62513, customers should promptly apply the July 2026 Critical Patch Update and any relevant patches for Oracle Process Manufacturing Regulatory Management versions 12.2.3 through 12.2.15. Oracle strongly recommends remaining on actively supported versions and applying security patches without delay to mitigate this vulnerability and reduce risk. Patch status is not yet explicitly confirmed for this CVE; therefore, customers should monitor Oracle's advisory for updates and apply patches as they become available.