This vulnerability affects Oracle Labor Distribution, a component of Oracle E-Business Suite Internal Operations, specifically versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to cause a partial denial of service (partial DOS). The vulnerability is rated as difficult to exploit and does not affect confidentiality or integrity, only availability. The CVSS 3.1 vector is AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L with a base score of 3.1. No known exploits are reported in the wild. The vendor advisory does not explicitly confirm patch availability for this specific vulnerability but references a Critical Patch Update for July 2026 containing many patches. Users are advised to consult the vendor advisory for patch status and updates.

Successful exploitation results in unauthorized ability to cause a partial denial of service in Oracle Labor Distribution. There is no impact on confidentiality or integrity. The impact is limited to availability with a low severity rating (CVSS 3.1 score 3.1).

Patch status is not yet confirmed — check the Oracle Critical Patch Update advisory for July 2026 at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle recommends applying security patches promptly and remaining on actively supported versions. No specific temporary mitigations are provided in the advisory.