Labor Distribution
Monthly
Oracle Labor Distribution versions 12.2.3 through 12.2.15, a component of Oracle E-Business Suite, allows a low-privileged network attacker to bypass internal authorization controls via HTTP, resulting in complete unauthorized read and write access to critical labor and payroll cost distribution data. The vendor characterizes this as 'easily exploitable,' and the 'Authentication Bypass' tag indicates that a standard EBS account holder can escalate beyond their assigned access level within the Internal Operations component. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the low attack complexity and high dual confidentiality and integrity impact make this a high-priority item in the August 2026 Oracle CPU.
Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: User Interface). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.
Oracle Labor Distribution versions 12.2.3 through 12.2.15, a component of Oracle E-Business Suite, allows a low-privileged network attacker to bypass internal authorization controls via HTTP, resulting in complete unauthorized read and write access to critical labor and payroll cost distribution data. The vendor characterizes this as 'easily exploitable,' and the 'Authentication Bypass' tag indicates that a standard EBS account holder can escalate beyond their assigned access level within the Internal Operations component. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the low attack complexity and high dual confidentiality and integrity impact make this a high-priority item in the August 2026 Oracle CPU.
Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: User Interface). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity.