This vulnerability affects the Oracle Quality product within Oracle E-Business Suite, specifically the Quality Workbench HTML system component. It impacts supported versions 12.2.3 through 12.2.15. The flaw allows an attacker with low privileges and network access via HTTP to compromise Oracle Quality by gaining unauthorized ability to read, update, insert, or delete some accessible data, as well as cause partial denial of service. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and low impact on confidentiality, integrity, and availability. Oracle's July 2026 Critical Patch Update advisory references multiple security patches but does not explicitly confirm a patch for this specific vulnerability. Customers are advised to review the advisory and apply patches promptly.

Successful exploitation can lead to unauthorized read access to some Oracle Quality data, unauthorized modification (update, insert, delete) of accessible data, and partial denial of service conditions affecting Oracle Quality availability. The impact affects confidentiality, integrity, and availability but is rated as low impact for each according to the CVSS vector. No known active exploitation has been reported.

Oracle has released a Critical Patch Update advisory in July 2026 that addresses numerous vulnerabilities across its product portfolio. Although the advisory does not explicitly confirm a patch for CVE-2026-62525, customers should consult the advisory and associated patch availability documentation at https://www.oracle.com/security-alerts/cpujul2026.html and apply relevant patches without delay. Maintaining up-to-date software versions and applying Oracle's security patches promptly is strongly recommended. Patch status for this vulnerability is not explicitly confirmed; therefore, users should verify the vendor advisory for current remediation guidance.