This vulnerability affects the Pasta component of Oracle E-Business Suite versions 12.2.3 to 12.2.15. It is an easily exploitable flaw that requires an attacker to have high privileges and logon access to the infrastructure hosting Pasta. Successful exploitation can result in complete compromise of the Pasta product. The CVSS vector indicates local attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Oracle's July 2026 Critical Patch Update advisory references this vulnerability but does not explicitly confirm patch availability or remediation status for Pasta. Customers are urged to remain on supported versions and apply patches promptly to mitigate risks.

The vulnerability allows a high privileged attacker with logon access to the Pasta infrastructure to fully compromise the Pasta product, impacting confidentiality, integrity, and availability. This could lead to complete takeover of the affected component within the Oracle E-Business Suite environment. No public exploits are currently known.

Oracle's advisory does not explicitly confirm a patch or remediation level for this vulnerability at this time. Customers should monitor the Oracle Critical Patch Update advisories and apply any relevant patches promptly when they become available. Maintaining supported versions and applying security updates without delay is strongly recommended by Oracle to mitigate this and other vulnerabilities.