Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CVE-2026-62613
Oracle Corporation Oracle Reports Developer — Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).
AV AC PR UI S C I A CVSS EPSS %ile KEV
P L N N C H H N 7.3 .0035 26.9 —
AFFECTED
Product Versions Fixed
Oracle Reports Developer 12.2.1.19.0 – —
TIMELINE
Jul 14 Reserved by oracle
Aug 18 Published (CNA: oracle)
Aug 26 RESCORED — CVE-2026-62613 (Oracle Corporation Oracle Reports Developer). CVSS 9.3 → 7.3 (NVD).
Description
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication). The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Reports Developer executes to compromise Oracle Reports Developer. While the vulnerability is in Oracle Reports Developer, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Reports Developer accessible data as well as unauthorized access to critical data or complete access to all Oracle Reports Developer accessible data. CVSS 3.1 Base Score 9.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N).
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
|---|
| July 14, 2026 | Reserved | Reserved by oracle |
| August 18, 2026 | Published | Published (CNA: oracle) |
| August 26, 2026 | RESCORED | RESCORED — CVE-2026-62613 (Oracle Corporation Oracle Reports Developer). CVSS 9.3 → 7.3 (NVD). |
Affected
Affected products and packages — 1 row
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|
| Oracle Corporation | Oracle Reports Developer | — | 12.2.1.19.0 | — |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-62613 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
