CVE-2021-38619

CVE-2021-38619 openBaraza HCM HR Payroll v.3.1.6 Vulnerabilidad de XSS almacenado no autenticado openBaraza HCM v.3.1.6 no neutraliza adecuadamente la entrada controlable por el usuario, lo que podría permitir que un atacante remoto no autenticado realice un ataque de cross-site scripting XSS...

CVE-2024-58387

Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/modelreport/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated path parameters index and ext. Attackers can craft requests such as...

CVE-2024-58387

Inspur Haiyue HCM Cloud is affected by an arbitrary file read vulnerability in the /api/model_report/file/download endpoint. The root cause is the use of unvalidated path parameters (index and ext), which allows unauthenticated remote attackers to perform path traversal attacks. By crafting reque...

CVE-2024-58387 Inspur HCM Cloud Arbitrary File Read via file/download Endpoint

Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/modelreport/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated path parameters index and ext. Attackers can craft requests such as...

EUVD-2024-55778

Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/modelreport/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated path parameters index and ext. Attackers can craft requests such as...

VulnCheck KEV: CVE-2024-58387

Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/modelreport/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated path parameters index and ext. Attackers can craft requests such as...

CVE-2025-22953

CVE-2025-22953 – Inyección SQL Ciega No Autenticada en Epicor HCM Actualización – Parche Publicado por Epicor Epicor ha publicado oficialmente un parche que soluciona esta vulnerabilidad. Se recomienda encarecidamente a todos los usuarios afectados que apliquen la actualización de inmediato. 🔗...

CVE-2021-38583

CVE-2021-38583 Vulnerabilidad XSS Reflejado en openBaraza HCM HR Payroll v.3.1.6 openBaraza HCM HR Payroll v.3.1.6 no neutraliza adecuadamente la entrada controlable por el usuario, lo que permite una vulnerabilidad de Cross-Site Scripting XSS reflejado en múltiples páginas. https://openbaraza.or...

CVE-2026-70773

Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite component: Knowledge Integration. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HCM...

CVE-2026-70773: Improper Access Control

Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite component: Knowledge Integration. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HCM...

PT-2026-77768

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle HCM Common Architecture versions 12.2.3 through 12.2.15 Description An issue exists in the Knowledge Integration component of the Oracle HCM Common Architecture. An unauthenticated attacker with network access vi...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Oracle Peoplesoft_Enterprise_Hcm_Human_Resources

--- CVE-2026-22006 – XSLT Server‑Side Injection via xsl:scr...

EUVD-2026-47545

Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite component: Install. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HCM Configurati...

EUVD-2026-47453

Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite component: Spreadsheet Loading. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HC...

EUVD-2026-47287

Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSoft component: Job Opening. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

EUVD-2026-47174

Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite component: Rapid Implementation. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HC...

EUVD-2026-47137

Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HCM...

EUVD-2026-47024

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft component: Global Payroll for Switzerland. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

EUVD-2026-46977

Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards component: Time Accounting and HRM Base. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards...

CVE-2026-62528

Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite component: Install. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HCM Configurati...