Oracle E-Business Suite Flow Manufacturing Security Vulnerability Allowing Takeover

A vulnerability has been identified in the Oracle Flow Manufacturing component of Oracle E-Business Suite, specifically in versions 12.2.9 through 12.2.15. This vulnerability, which is easily exploitable, allows a low-privileged attacker with network access to use SQL to compromise the application. Successful exploitation can lead to a complete takeover of Oracle Flow Manufacturing.

Impact

Exploitation of this vulnerability can result in a full takeover of the Oracle Flow Manufacturing application.

Remediation

Users are advised to apply the May 2026 Critical Security Patch Update, which includes a patch for this vulnerability. For instructions on applying this patch, refer to the Oracle E-Business Suite Release 12 Critical Security Patch Update Knowledge Document (May 2026), available as My Oracle Support Note KA923.