This vulnerability affects Oracle Labor Distribution versions 12.2.3 through 12.2.15 and allows an attacker with low privileges and network access via HTTP to compromise the system. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates that the attack can be performed remotely over the network with low attack complexity, requiring low privileges and no user interaction, resulting in high confidentiality, integrity, and availability impacts. The vendor advisory is part of Oracle's July 2026 Critical Patch Update, which includes numerous patches across Oracle products, but the specific patch availability for this vulnerability is not explicitly confirmed in the advisory content provided.

Successful exploitation can lead to complete compromise of Oracle Labor Distribution, impacting confidentiality, integrity, and availability of the system. This means attackers could potentially take over the affected product, leading to unauthorized access and control.

Oracle has released a Critical Patch Update advisory in July 2026 that addresses multiple vulnerabilities. However, the specific patch status for CVE-2026-60932 in Oracle Labor Distribution is not explicitly confirmed in the advisory content provided. Users should consult the official Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for the latest patch availability and apply any relevant patches promptly. Until confirmed patched, organizations should prioritize patching and follow Oracle's recommendations for supported versions.