This vulnerability affects Oracle Applications Technology Stack component Configuration in Oracle E-Business Suite versions 12.2.3 to 12.2.15. It is difficult to exploit and requires a high privileged attacker with logon access to the underlying infrastructure. Exploitation can compromise the Oracle Applications Technology Stack, resulting in unauthorized creation, deletion, or modification of critical data or full access to all accessible data within the stack. The CVSS 3.1 vector indicates local attack vector, high attack complexity, high privileges required, no user interaction, unchanged scope, and high confidentiality and integrity impacts.

An attacker with high privileges and logon access to the infrastructure can exploit this vulnerability to gain unauthorized creation, deletion, or modification access to critical data or all data accessible by the Oracle Applications Technology Stack. This could lead to significant data compromise within affected environments. There is no impact on availability reported.

Patch status is not yet confirmed — check the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying Critical Patch Updates promptly to address vulnerabilities. Since this vulnerability requires high privileges and local access, limiting access to the infrastructure and ensuring timely patching are key mitigations.