This vulnerability affects Oracle Time and Labor version 12.2.3 and involves a flaw that can be exploited by an attacker with low privileges and network access over HTTP to cause a partial denial of service condition. The CVSS 3.1 base score is 3.1, reflecting low impact primarily on availability. There is no indication of confidentiality or integrity impact. The vulnerability is considered difficult to exploit. No explicit patch or remediation level is provided in the advisory, but Oracle's July 2026 Critical Patch Update advisory references multiple patches across products, though no direct patch link for this specific vulnerability is included.

Successful exploitation results in unauthorized partial denial of service of Oracle Time and Labor, impacting availability. There is no impact on confidentiality or integrity. The attack requires network access via HTTP and low privileges, with a high attack complexity, making exploitation difficult.

Patch status is not yet confirmed — check the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly and remaining on actively supported versions. No specific temporary mitigations or workarounds are provided in the advisory.