This vulnerability affects Oracle Inventory Management within Oracle E-Business Suite, specifically versions 12.2.3 to 12.2.15. It is classified as difficult to exploit and requires a high privileged attacker with existing logon access to the infrastructure. The vulnerability can lead to a complete compromise of Oracle Inventory Management, impacting confidentiality, integrity, and availability. The CVSS vector indicates local attack vector, high attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor advisory from Oracle's July 2026 Critical Patch Update does not explicitly confirm a patch for this specific vulnerability but strongly recommends applying available patches promptly. No known exploits in the wild have been reported.

Successful exploitation allows an attacker with high privileges and logon access to the infrastructure to take over Oracle Inventory Management, potentially compromising sensitive data and disrupting operations. The impact affects confidentiality, integrity, and availability of the affected product. The vulnerability is rated medium severity with a CVSS 3.1 base score of 6.4.

Oracle has not explicitly stated a patch or remediation level for this vulnerability in the provided advisory. Customers should review Oracle's July 2026 Critical Patch Update and apply all relevant security patches promptly to mitigate this and other vulnerabilities. Maintaining up-to-date software versions and applying Oracle's cumulative security patches is strongly recommended. Patch status is not yet confirmed for this specific vulnerability—check the vendor advisory for current remediation guidance.