Description
Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Labor Distribution executes to compromise Oracle Labor Distribution. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Labor Distribution accessible data. CVSS 3.1 Base Score 4.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N).
Published: 2026-07-21
Score: 4.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The Oracle Labor Distribution product in Oracle E‑Business Suite contains a flaw that permits a high‑privileged user who can log on locally to the host to create, delete, or modify data within the application. This results in a violation of data integrity, potentially allowing unauthorized tampering of critical records. The vulnerability does not affect confidentiality or availability.

Affected Systems

Oracle Labor Distribution component of Oracle E‑Business Suite versions 12.2.3 through 12.2.15 are affected. These versions run on infrastructure where users have direct logon access.

Risk and Exploitability

The CVSS v3.1 base score of 4.1 suggests moderate severity. The EPSS score is below 1 % and the vulnerability is not listed in CISA KEV, indicating low likelihood of widespread exploitation. However, the flaw requires local high‑privilege access, so only environments where privileged users can log on to the server are at risk. No remote exploitation path is documented.

Generated by OpenCVE AI on August 4, 2026 at 16:34 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply Oracle’s patch or upgrade to a later version of Labor Distribution that addresses the flaw
  • Restrict local high‑privilege access by enforcing strict role‑based access control and ensuring only trusted administrators can log into the host
  • Monitor and audit create, delete, and modify operations for anomalous activity

Generated by OpenCVE AI on August 4, 2026 at 16:34 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 04 Aug 2026 17:00:00 +0000

Type Values Removed Values Added
Title Oracle Labor Distribution Integrity Vulnerability Allowing Local Privileged Attacker

Sat, 01 Aug 2026 05:15:00 +0000

Type Values Removed Values Added
Title Oracle Labor Distribution Integrity Vulnerability Allowing Local Privileged Attacker

Tue, 28 Jul 2026 20:45:00 +0000

Type Values Removed Values Added
Title Integrity Impact Vulnerability in Oracle Labor Distribution Allowing Unauthorized Data Modifications
Weaknesses CWE-284

Fri, 24 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-269
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 23 Jul 2026 21:45:00 +0000

Type Values Removed Values Added
Title Integrity Impact Vulnerability in Oracle Labor Distribution Allowing Unauthorized Data Modifications
Weaknesses CWE-284

Tue, 21 Jul 2026 22:00:00 +0000

Type Values Removed Values Added
Description Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Labor Distribution executes to compromise Oracle Labor Distribution. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Labor Distribution accessible data. CVSS 3.1 Base Score 4.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N).
First Time appeared Oracle
Oracle labor Distribution
CPEs cpe:2.3:a:oracle:labor_distribution:*:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle labor Distribution
References
Metrics cvssV3_1

{'score': 4.1, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N'}

Subscriptions

Oracle E-business Suite Labor Distribution
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2026-07-24T16:53:40.723Z

Reserved: 2026-07-08T15:51:55.603Z

Link: CVE-2026-60938

cve-icon Vulnrichment

Updated: 2026-07-24T16:53:34.450Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-21T22:18:28.553

Modified: 2026-07-29T17:04:26.743

Link: CVE-2026-60938

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T16:45:04Z

Weaknesses
  • CWE-269

    Improper Privilege Management