This vulnerability affects Oracle Labor Distribution within Oracle E-Business Suite, specifically versions 12.2.3 through 12.2.15. It allows an attacker with low privileges and network access over HTTP to cause a partial denial of service condition. The CVSS vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, and impact limited to availability only. No confidentiality or integrity impacts are noted. The vulnerability is considered difficult to exploit. No specific remediation or patch information is provided in the vendor advisory, but Oracle's July 2026 Critical Patch Update advisory references multiple patches across products and recommends applying patches promptly.

Successful exploitation results in unauthorized ability to cause a partial denial of service of Oracle Labor Distribution. There is no impact on confidentiality or integrity. The overall impact is limited availability degradation.

Oracle's July 2026 Critical Patch Update advisory recommends applying available security patches promptly to address vulnerabilities including this one. However, no explicit patch or remediation level is stated for this specific vulnerability in the advisory. Patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance.