This vulnerability in Oracle Transportation Management (component: CSV Management) version 6.5.3 allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to critical data or complete access to all accessible data, unauthorized update, insert, or delete operations on some data, and the ability to cause a partial denial of service. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and low availability impact. The vendor advisory does not explicitly confirm a patch or remediation level for this specific vulnerability but advises applying Critical Patch Updates regularly.

The vulnerability can result in unauthorized access to critical and all accessible data within Oracle Transportation Management 6.5.3, unauthorized modification of some data, and partial denial of service conditions. This impacts confidentiality (high), integrity (low), and availability (low) of the affected system.

Patch status is not yet confirmed — check the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions to mitigate exploitation risks.