194 matches found
EUVD-2026-106220
Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite component: Total Compensation Statement. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-101821
Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite component: Total Compensation Statement. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-101821
A vulnerability exists in the Total Compensation Statement component of the Oracle Compensation Workbench product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this flaw, which requires human interaction from...
Oracle E-Business Suite: CVE-2026-101821: Critical Patch Update
Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite component: Total Compensation Statement. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
PT-2026-119492
Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite component: Total Compensation Statement. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
Oracle Compensation Workbench security vulnerability
A security vulnerability exists in Oracle Compensation Workbench versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Total Compensation Statement component and may allow low-privilege attackers to perform unauthorized updates, insertions, or deletions of certain data,...
CVE-2025-60931
An Insecure Direct Object Reference IDOR in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request...
CVE-2025-60931
An Insecure Direct Object Reference IDOR in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request...
CVE-2025-60931
An Insecure Direct Object Reference IDOR in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request...
CVE-2025-60931
An Insecure Direct Object Reference IDOR in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request...
CVE-2025-60931
An Insecure Direct Object Reference (IDOR) vulnerability exists in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 . An unauthorized attacker can arbitrarily view the compensation information of other employees by sending a crafted GET request . Exploitation details are...
CVE-2025-60931: Authorization Bypass Through User-Controlled Key
An Insecure Direct Object Reference IDOR in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request...
PT-2026-65839
Name of the Vulnerable Software and Affected Versions Infor Global HR version 11.24.10.01.33 Description An Insecure Direct Object Reference IDOR exists in the Employee Compensation View function. This allows unauthorized attackers to view the compensation information of other employees by sendin...
EUVD-2025-210526
An Insecure Direct Object Reference IDOR in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request...
EUVD-2026-47111
Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite component: Compensation Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
EUVD-2026-47112
Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite component: Compensation Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-60799
Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite component: Compensation Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-60800
Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite component: Compensation Workbench. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
PT-2026-62788
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Compensation Workbench versions 12.2.3 through 12.2.15 Description A flaw in the Oracle Compensation Workbench allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to...
PT-2026-62789
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Compensation Workbench versions 12.2.3 through 12.2.15 Description A flaw in the Oracle Compensation Workbench allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to...