This vulnerability affects Oracle Production Scheduling component of Oracle E-Business Suite versions 12.2.3 through 12.2.15. An unauthenticated attacker with physical access to the communication segment connected to the hardware where Oracle Production Scheduling runs can exploit this issue. Successful exploitation requires human interaction from a third party. The vulnerability can lead to full compromise of Oracle Production Scheduling, impacting confidentiality, integrity, and availability. The CVSS 3.1 base score is 7.1 with attack vector 'Adjacent', high attack complexity, no privileges required, and user interaction required. The vendor advisory does not explicitly confirm patch availability or remediation status for this specific vulnerability but recommends applying Critical Patch Updates promptly.

Successful exploitation can result in complete takeover of Oracle Production Scheduling, affecting confidentiality, integrity, and availability of the system. The attack requires physical access to the communication segment and human interaction, making exploitation difficult. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle recommends applying Critical Patch Updates promptly and staying on actively supported versions. Until a patch is confirmed, restrict physical access to communication segments and monitor for suspicious activity involving human interaction with the system.