Our IIS manager reviewed the logs and thinks the problem is related to the Oracle Webgate product we use for authentication.

 

Update: patching the Oracle Webgate product fixes this issue. Thanks!