This vulnerability affects Oracle Advanced Benefits component of Oracle E-Business Suite version 12.2.15. It allows an attacker with low privileges and network access via HTTP to compromise the product, resulting in unauthorized access to critical or all accessible data within Oracle Advanced Benefits. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high confidentiality impact without integrity or availability impact. The vendor advisory references a July 2026 Critical Patch Update containing numerous patches but does not explicitly confirm a fix for this specific vulnerability.

Successful exploitation can lead to unauthorized access to critical or all accessible data in Oracle Advanced Benefits 12.2.15. There is no reported impact on data integrity or system availability. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the Oracle July 2026 Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. Until a patch is confirmed and applied, restrict network access to Oracle Advanced Benefits to trusted users only.