Threat Intelligence Database

CVE-2026-62514 is a high-severity vulnerability in Oracle Process Manufacturing Regulatory Management versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability impacts confidentiality and integrity but does not affect availability. No official patch or remediation level is currently confirmed in the vendor advisory.

CVE-2026-62513 is a high-severity vulnerability in Oracle Process Manufacturing Regulatory Management versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to compromise the product, potentially gaining unauthorized access to critical data and the ability to update, insert, or delete some data. The vulnerability impacts confidentiality and integrity with a CVSS 3.1 base score of 8.5. Oracle has published a Critical Patch Update advisory for July 2026 that includes security patches for multiple products, including Oracle E-Business Suite components. However, the specific patch status for this vulnerability is not explicitly confirmed in the advisory. Customers are strongly recommended to apply Oracle's Critical Patch Update promptly to mitigate this and other vulnerabilities.