This vulnerability affects Oracle HCM Configuration Workbench, a component of Oracle E-Business Suite Rapid Implementation, specifically versions 12.2.3 through 12.2.15. It allows a high privileged attacker with network access via HTTP to compromise the system, leading to complete takeover. The CVSS 3.1 base score is 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. The vulnerability is categorized under CWE-269 (Improper Privilege Management). The Oracle Critical Patch Update advisory for July 2026 mentions a large number of patches but does not explicitly confirm a patch or remediation status for this vulnerability in the provided content.

Successful exploitation can lead to complete compromise of Oracle HCM Configuration Workbench, affecting confidentiality, integrity, and availability of the system. This could allow an attacker with high privileges and network access to take over the affected product.

Patch status is not yet confirmed — check the vendor advisory (https://www.oracle.com/security-alerts/cpujul2026.html) for current remediation guidance. Oracle strongly recommends applying Critical Patch Updates promptly to mitigate vulnerabilities. Until a specific patch is confirmed, ensure that only trusted, high privileged users have network access to the Oracle HCM Configuration Workbench and monitor for unusual activity.