CVE-2026-62516: SQL Injection
Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Product Security). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Demantra Demand Management. Successful attacks of this vulnerability can result in takeover of Oracle Demantra Demand Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-62516?
CVE-2026-62516 has a high severity score of 8.8.
How do I fix CVE-2026-62516?
To remediate CVE-2026-62516, ensure your Oracle Demantra Demand Management product is updated to the latest supported version beyond 12.2.15.
What types of attacks can exploit CVE-2026-62516?
CVE-2026-62516 can be exploited via SQL injection attacks by low-privileged attackers with network access.
What versions of Oracle Demantra Demand Management are affected by CVE-2026-62516?
Versions 12.2.3 through 12.2.15 of Oracle Demantra Demand Management are affected by CVE-2026-62516.
What impact does CVE-2026-62516 have on the security of Oracle Demantra?
CVE-2026-62516 can lead to a complete compromise of the Oracle Demantra system, affecting confidentiality, integrity, and availability.