This vulnerability affects Oracle Advanced Benefits component of Oracle E-Business Suite version 12.2.15. It is exploitable remotely over the network via HTTP by an attacker with high privileges. Successful exploitation can result in unauthorized access to critical data and unauthorized update, insert, or delete operations on some data accessible through Oracle Advanced Benefits. The vulnerability has a scope change, meaning it may affect other Oracle products beyond Advanced Benefits. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, scope changed, high confidentiality impact, low integrity impact, and no availability impact. No official remediation level or patch information is provided in the advisory, but Oracle's July 2026 Critical Patch Update advisory references multiple patches and strongly recommends applying patches promptly.

Successful exploitation allows attackers with high privileges and network access to gain unauthorized access to critical data within Oracle Advanced Benefits and perform unauthorized data modifications (update, insert, delete) on some accessible data. The scope change indicates potential impact on additional Oracle products beyond Advanced Benefits. The confidentiality impact is high, integrity impact is low, and availability is not affected.

The vendor advisory does not explicitly state a patch or remediation for this specific vulnerability but references the July 2026 Critical Patch Update containing numerous security patches. Oracle strongly recommends that customers apply security patches without delay and remain on actively supported versions. Patch status for this vulnerability is not yet confirmed—check the Oracle July 2026 Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance.