This vulnerability affects Oracle Succession Planning component of Oracle E-Business Suite, specifically versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise the application by gaining unauthorized ability to read, update, insert, or delete some accessible data, as well as cause a partial denial of service. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and low impacts on confidentiality, integrity, and availability. Oracle has published this vulnerability in their July 2026 Critical Patch Update advisory but does not explicitly state the patch availability or remediation level for this specific issue. Oracle strongly recommends applying security patches from their Critical Patch Update advisories without delay to mitigate such vulnerabilities.

Successful exploitation can lead to unauthorized read access to some data, unauthorized modification (update, insert, delete) of accessible data, and partial denial of service of Oracle Succession Planning. The impact affects confidentiality, integrity, and availability at a low level according to the CVSS score. There are no known exploits in the wild currently reported.

Oracle's July 2026 Critical Patch Update advisory includes security patches addressing multiple vulnerabilities, including this one. Although no explicit patch availability or remediation level is stated for CVE-2026-62519, Oracle recommends customers apply the latest Critical Patch Updates promptly to mitigate this and other vulnerabilities. Users should verify patch availability and installation instructions from the official Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html. No vendor advisory states that no action is required or that the vulnerability is already mitigated.