This vulnerability affects Oracle Inventory Management within Oracle E-Business Suite, specifically versions 12.2.3 through 12.2.15. It permits a high privileged attacker who already has logon access to the system hosting Oracle Inventory Management to cause a partial denial of service condition. The CVSS 3.1 base score is 1.9, reflecting low impact limited to availability with no confidentiality or integrity impact. The attack vector requires local access with high privileges and high attack complexity. Oracle's July 2026 Critical Patch Update advisory lists many patched products but does not explicitly confirm a patch or remediation for this specific vulnerability. The vendor strongly recommends applying available patches for supported products, but no direct patch link or remediation level is provided for this issue.

Successful exploitation can result in unauthorized partial denial of service of Oracle Inventory Management. There is no impact on confidentiality or integrity. The vulnerability requires high privileges and local access, making exploitation difficult.

Patch status is not yet confirmed — check the Oracle July 2026 Critical Patch Update advisory and subsequent updates for current remediation guidance. Oracle recommends applying all relevant security patches promptly for supported products. Until a specific patch is available, limit high privileged access to the infrastructure hosting Oracle Inventory Management to trusted personnel only.