CVE-2026-60619: Improper Privilege Management

Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards component: Time Accounting and HRM Base. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

PT-2026-63104

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft component: Global Payroll for Switzerland. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2026-61267: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite component: Spreadsheet Loading. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HC...

CVE-2026-61235: Improper Access Control

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft component: Global Payroll for Switzerland. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2026-60899: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite component: Rapid Implementation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HC...

CVE-2026-60900: Improper Privilege Management

Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite component: Rapid Implementation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle H...

CVE-2026-60666: Improper Access Control

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via Oracle Net to compromise PeopleSoft Enterprise...

CVE-2026-60492: Improper Privilege Management

Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards component: OW HR PR Foundation. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

PT-2026-62851

Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite component: Rapid Implementation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HC...

CVE-2026-61076: Improper Privilege Management

Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSoft component: Job Opening. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-60667: Improper Access Control

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Core. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise PeopleSoft Enterprise HCM Human...

PT-2026-62814

Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HCM...

PT-2026-63222

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HCM Configuration Workbench versions 12.2.3 through 12.2.15 Description A flaw in the Install component of the Oracle HCM Configuration Workbench allows a low privileged attacker with network access via HTTP to...

CVE-2026-15804

The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands via specific parameters, thereby compromising the confidentiality, integrity, and availability of database data...

CVE-2026-15804 MetaGuru｜HCM - SQL Injection

The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands via specific parameters, thereby compromising the confidentiality, integrity, and availability of database data...

CVE-2026-15804 MetaGuru｜HCM - SQL Injection

The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands via specific parameters, thereby compromising the confidentiality, integrity, and availability of database data...

CVE-2026-15804

The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands via specific parameters, thereby compromising the confidentiality, integrity, and availability of database data...

CVE-2026-15804

The CVE-2026-15804 entry concerns MetaGuru’s HCM Product with a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands through specific parameters, compromising database confidentiality, integrity, and availability. The connected records confirm affected component as ...

CVE-2026-15804: Improper Neutralization of Special Elements used in an SQL Command

The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands via specific parameters, thereby compromising the confidentiality, integrity, and availability of database data...

The vulnerability of the Knowledge Integration sub-component of the Oracle HCM Common Architecture component of the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Knowledge Integration sub-component of the Oracle HCM Common Architecture component in the Oracle E-Business Suite relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized acces...