This vulnerability affects Oracle Project Manufacturing (component: PJM Command Center) version 16. It permits a low privileged attacker with infrastructure logon to compromise the product by unauthorized modification of accessible data and causing partial denial of service. The CVSS 3.1 base score is 3.6 with vector AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L, indicating local attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact. The vulnerability is categorized under CWE-284 (Improper Access Control). Oracle's July 2026 Critical Patch Update advisory mentions many patches but does not explicitly confirm a patch for this vulnerability. No known exploits are reported in the wild.

Successful exploitation allows unauthorized update, insert, or delete access to some data accessible by Oracle Project Manufacturing and can cause a partial denial of service. The impact is limited to integrity and availability with no confidentiality loss. The vulnerability requires local access with low privileges and is difficult to exploit, limiting the overall risk.

Oracle has not explicitly confirmed a patch or remediation level for this vulnerability in the provided advisory. The vendor strongly recommends applying all available security patches from the July 2026 Critical Patch Update and remaining on actively supported versions. Organizations should monitor Oracle's security advisories for updates regarding this vulnerability and apply patches promptly once available. No specific workaround or temporary fix is documented.