This vulnerability affects Oracle Production Scheduling within Oracle E-Business Suite (component: Internal Operations) in versions 12.2.3 to 12.2.15. A high privileged attacker with logon access to the infrastructure can exploit this flaw to gain unauthorized update, insert, or delete access to some data accessible by Oracle Production Scheduling. The CVSS 3.1 base score is 1.9, reflecting low impact primarily on data integrity. There is no indication of confidentiality or availability impact. The vulnerability is considered difficult to exploit due to the required high privileges and local access.

Successful exploitation can lead to unauthorized modification (update, insert, delete) of some data accessible by Oracle Production Scheduling. There is no impact on data confidentiality or system availability. The attacker must already have high privileges and logon access to the affected infrastructure, limiting the scope of potential exploitation.

Patch status is not yet confirmed — check the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying available Critical Patch Updates promptly to address vulnerabilities. Since no explicit patch or workaround is stated in the advisory content provided, users should monitor Oracle's official security alerts for updates and apply patches as soon as they become available.