4.3
Medium
CVE-2026-62483 Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations)
Description
Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Contracts. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Project Contracts accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Oracle Project Contracts 12.2 | 12.2.3 → 12.2.15 | No fix stated |
Other CVEs of Oracle Project Contracts
The 4 CVEs of Oracle Project Contracts →
CVE-2026-101830
Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations)
7.7
High
CVE-2026-60939
Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations)
3.1
Low
CVE-2026-60848
Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations)
8.1
High