16 matches found
EUVD-2026-106309
Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll Year End. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...
CVE-2026-83391
Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll Year End. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...
CVE-2026-83391
The Oracle E-Business Suite product Oracle HRMS (US) , specifically within the US Payroll Year End component, is affected by a vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, though it requires human...
PT-2026-119586
Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll Year End. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...
Oracle E-Business Suite: CVE-2026-83391: Critical Patch Update
Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll Year End. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...
Oracle HRMS (US) security vulnerabilities
A security vulnerability exists in Oracle HRMS US versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the US Payroll Year End component. It may allow low-privilege attackers to access HTTP-based interfaces, enabling unauthorized updates, insertions, or deletions of certai...
EUVD-2026-61645
Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll - General. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS US. While the...
EUVD-2026-61479
Vulnerability in the JD Edwards EnterpriseOne US Payroll product of Oracle JD Edwards component: Payroll. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne US...
CVE-2026-71101: Improper Access Control
Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll Tax Issues. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HRMS US executes to...
PT-2026-77435
Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne US Payroll version 9.2 Description A flaw in the Payroll component allows a low-privileged attacker with network access via JDENET to compromise the system. Successful exploitation can lead to a full takeover of...
CVE-2026-70690: Improper Access Control
Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll - General. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS US. While the...
CVE-2026-60956: Improper Access Control
Vulnerability in the JD Edwards EnterpriseOne US Payroll product of Oracle JD Edwards component: Payroll. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne US...
EUVD-2026-47542
Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll - General. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...
CVE-2026-62565: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll Year End. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...
CVE-2026-62521: Improper Access Control
Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll - General. Supported versions that are affected are 12.2.7-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HRMS US. Successful...
CVE-2026-62524: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerability in the Oracle HRMS US product of Oracle E-Business Suite component: US Payroll - General. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS US. Successful...