This vulnerability affects Oracle Project Manufacturing component PJM Command Center in version V16. It is difficult to exploit and requires a high privileged attacker with logon access to the infrastructure where the product runs. Successful exploitation can result in unauthorized creation, deletion, or modification of critical data or all data accessible by Oracle Project Manufacturing. The CVSS vector indicates local attack vector (AV:L), high attack complexity (AC:H), high privileges required (PR:H), no user interaction (UI:N), unchanged scope (S:U), and high confidentiality and integrity impacts (C:H/I:H) with no availability impact (A:N). There is no vendor advisory explicitly stating a patch or fix for this vulnerability yet.

An attacker with high privileges and local access to the infrastructure can compromise Oracle Project Manufacturing, leading to unauthorized creation, deletion, or modification of critical data. This can result in loss of data integrity and confidentiality within the Oracle Project Manufacturing environment. There is no indication of impact on system availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Oracle's July 2026 Critical Patch Update advisory does not explicitly list a patch for this vulnerability at this time. Customers should monitor Oracle's security advisories and apply any future patches promptly. Since exploitation requires high privileges and local access, restricting and monitoring privileged access to the infrastructure can reduce risk.