CVE-2026-62608
Received Received - Intake

Oracle Reports Developer Remote Code Execution

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Oracle

Description
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows low privileged attacker with network access via CORBA to compromise Oracle Reports Developer. While the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Reports Developer. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-18
Last Modified
2026-08-18
Generated
2026-08-19
AI Q&A
2026-08-19
EPSS Evaluated
N/A
NVD
CVE-2026-62608

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
oracle reports_developer 12.2.1.19.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in Oracle Reports Developer, part of Oracle Fusion Middleware. It allows a low-privileged attacker with network access via CORBA to compromise the system. Successful exploitation can lead to full takeover of Oracle Reports Developer.

Detection Guidance

Detection requires checking for Oracle Reports Developer version 12.2.1.19.0. Use Oracle's tools like OPatch or Enterprise Manager to verify installed versions. Network scans for CORBA access points may help identify exposed interfaces.

Impact Analysis

An attacker could gain control over Oracle Reports Developer, potentially leading to unauthorized access, data breaches, or disruption of services. The high CVSS score indicates significant confidentiality, integrity, and availability impacts.

Compliance Impact

This vulnerability could lead to unauthorized data access or breaches, which may violate GDPR, HIPAA, or other regulations. Compliance could be impacted due to potential loss of data confidentiality and integrity.

Mitigation Strategies

Apply the latest Oracle Critical Patch Update for Oracle Fusion Middleware. Restrict network access to CORBA interfaces via firewalls. Upgrade to a non-vulnerable version if available. Monitor Oracle security advisories for updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-62608. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart