CVE-2026-62547 is a vulnerability in Oracle Workflow Notification Mailer component of Oracle E-Business Suite version 12.2.3. It allows an unauthenticated attacker with network access via SMTP to compromise Oracle Workflow, potentially resulting in full system takeover. The vulnerability has a CVSS 3.1 score of 8.1 with high confidentiality, integrity, and availability impacts. The vulnerability is difficult to exploit and no public exploit is known. Oracle's July 2026 Critical Patch Update advisory references multiple patches but does not explicitly confirm a patch for this specific vulnerability. The advisory strongly recommends applying available security patches promptly to mitigate risks.

Successful exploitation of this vulnerability can lead to complete compromise of Oracle Workflow, affecting confidentiality, integrity, and availability of the system. An unauthenticated attacker with network access via SMTP could take over the Oracle Workflow component, potentially impacting business processes relying on this system.

Oracle's July 2026 Critical Patch Update advisory recommends applying security patches without delay to mitigate vulnerabilities. However, no explicit patch or remediation status is confirmed for CVE-2026-62547 in the advisory. Users should monitor Oracle's official security alerts for updates and apply any relevant patches as soon as they become available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.