Threats Tagged 'cve-2026-62605'

CVE-2026-62605 is a high-severity vulnerability in Oracle Partner Management within Oracle E-Business Suite versions 12.2.3 through 12.2.15. It allows an unauthenticated attacker with network access via HTTP to compromise the product, requiring user interaction from a person other than the attacker. Successful exploitation can lead to unauthorized access to critical data and unauthorized modification of some data within Oracle Partner Management. The vulnerability has a CVSS 3.1 base score of 8.2, indicating significant confidentiality and integrity impacts. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous patches across Oracle products. Users are strongly advised to apply the relevant patches promptly.

Oracle has released a Critical Security Patch Update (CSPU) in August 2026 addressing multiple vulnerabilities in various components of Oracle E-Business Suite versions 12.2.3 through 12.2.15, among other Oracle products. The update includes 943 security patches across many Oracle product families. The vulnerabilities affect modules such as General Ledger, Payments, Workflow, Sales, Purchasing, Call Center Technology, and others. Oracle strongly recommends applying these patches promptly to mitigate risks, as some vulnerabilities have been subject to attempted exploitation. The patch update complements Oracle's quarterly cumulative Critical Patch Updates and aims to reduce disruption by providing targeted fixes. No CVSS score is provided for these vulnerabilities. No known exploits in the wild have been reported at this time.