This vulnerability affects Oracle Labor Distribution versions 12.2.3 to 12.2.15 and requires an attacker to have high privileges and local access to the infrastructure hosting the product. The flaw allows unauthorized modification of critical data within Oracle Labor Distribution, impacting data integrity but not confidentiality or availability. The CVSS vector (AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N) reflects that exploitation is difficult due to required access and privileges. No known exploits in the wild have been reported. Oracle's July 2026 Critical Patch Update advisory references this vulnerability but does not explicitly confirm a patch or remediation level for it yet.

An attacker with high privileges and local access to the infrastructure can modify, create, or delete critical data within Oracle Labor Distribution, compromising data integrity. There is no impact on confidentiality or availability according to the CVSS vector. This could affect business processes relying on accurate labor distribution data.

Patch status is not yet confirmed — check the Oracle July 2026 Critical Patch Update advisory (https://www.oracle.com/security-alerts/cpujul2026.html) for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. Since exploitation requires high privileges and local access, limiting such access and following Oracle's patching recommendations are advised.