36 matches found
CVE-2021-2316
CVE-2021-2316 affects Oracle E-Business Suite, specifically Oracle HRMS (France) French HR, with affected versions 12.1.1–12.1.3. The vulnerability is exploitable over HTTP by a low-privilege attacker with network access, potentially leading to unauthorized creation, deletion or modification of d...
CVE-2026-46953
Technical details (affected product, vulnerability root cause, mitigations) are not publicly available in the provided documents. Monitor for updates.
CVE-2026-62562
The CVE-2026-62562 entry concerns Oracle E-Business Suite HRMS (US), Internal Operations. Affected products/versions are Oracle E-Business Suite 12.2.3–12.2.15. The flaw is exploitable by a low-privileged attacker with network access via HTTP, enabling unauthorized access to Oracle HRMS (US) data...
CVE-2026-62567
Oracle HRMS (UK) in Oracle E-Business Suite (UK Payroll) is affected on versions 12.2.3–12.2.15. The issue is exploitable with network access via HTTP by a low-privileged user, potentially leading to unauthorized access to critical data across Oracle HRMS (UK) and potentially other products (scop...
CVE-2026-62559
The CVE-2026-62559 entry concerns Oracle E-Business Suite's Oracle HRMS (US) with affected versions 12.2.3–12.2.15 in the Internal Operations component. The issue is exploitable over a network via HTTP and requires HIGH privileges, with no user interaction, and a changed scope. Successful exploit...
CVE-2026-61123
CVE-2026-61123 affects Oracle HRMS (US) within Oracle E-Business Suite, component Internal Operations. Affected versions are 12.2.3–12.2.15. The vulnerability can be triggered by a low-privilege attacker over HTTP with network access, potentially enabling unauthorized read access to a subset of O...
CVE-2026-62548
The CVE-2026-62548 vulnerability affects the Oracle HRMS (US) component of Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. The issue allows a high-privilege attacker with network access via HTTP to compromise Oracle HRMS (US), with potential takeover (as state...
CVE-2026-62565
CVE-2026-62565 affects Oracle HRMS (US) within Oracle E-Business Suite, US Payroll Year End, for versions 12.2.3–12.2.15. The vulnerability is exploitable by a low-privilege attacker over HTTP with network access, potentially leading to unauthorized access to confidential data and unauthorized up...
CVE-2026-61252
CVE-2026-61252 is a vulnerability in Oracle E-Business Suite’s Oracle HRMS (Hong Kong) payroll component. Affected: Hong Kong Payroll in versions 12.2.13–12.2.15. Described impact: a low-privilege, network-accessible attacker (via HTTP) can read and perform unauthorized update/insert/delete on ce...
CVE-2026-62465
CVE-2026-62465 affects Oracle HRMS (US) within Oracle E-Business Suite, Internal Operations. Affected versions: 12.2.9–12.2.15. A low-privileged, logon-local attacker can cause a hang/crash (DOS), and perform unauthorized update/insert/delete and read access to Oracle HRMS data. Overall impact: c...
CVE-2026-62549
CVE-2026-62549 is a vulnerability in the Oracle HRMS (UK) component of Oracle E-Business Suite, affecting versions 12.2.3–12.2.15. The flaw allows a low-privileged, network-accessible attacker (via HTTP) to compromise Oracle HRMS (UK), potentially leading to unauthorized creation, deletion, or mo...
CVE-2026-62561
Oracle E-Business Suite HRMS (US) in versions 12.2.3–12.2.15 (Internal Operations) contains a vulnerability that allows a low-privileged attacker with logon to the infrastructure to compromise Oracle HRMS (US) and potentially take over. CVSSv3.1 base score 7.8 (C:H, I:H, A:H) with Local attack ve...
CVE-2026-60344
The CVE-2026-60344 entry concerns Oracle E-Business Suite’s Oracle HRMS (France) with the French HR Payroll component. Affected releases are 12.2.3 through 12.2.15. The issue is exploitable by a low-privilege attacker over HTTP on the network, potentially enabling unauthorized update, insert, or ...
CVE-2026-60965
CVE-2026-60965 affects Oracle HRMS (France) in Oracle E-Business Suite (component: French HR). Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-accessing attacker (via HTTP) to compromise Oracle HRMS (France), potentially causing unauthorized creation, dele...
CVE-2026-61260
CVE-2026-61260 affects Oracle E-Business Suite HRMS UK (UK Payroll) with vulnerable versions 12.2.3–12.2.15. A low-privilege, network-access attacker (via HTTP) can lead to unauthorized update/insert/delete and read access to Oracle HRMS UK data. The CVSS v3.1 base score is 5.4 (Confidentiality a...
CVE-2026-62453
CVE-2026-62453 affects Oracle HRMS (UK) within Oracle E-Business Suite, component Internal Operations. Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged, network-attacker with HTTP access to perform unauthorized updates/inserts/deletes and read access, with a partial...
CVE-2026-62560
The CVE-2026-62560 affects Oracle HRMS (Norway) within Oracle E-Business Suite (Internal Operations). Affected versions are 12.2.3–12.2.15. The vulnerability is exploitable over a network via HTTP by a low-privileged attacker, potentially granting unauthorized access to all Oracle HRMS (Norway) d...
CVE-2026-60892
CVE-2026-60892 affects Oracle E-Business Suite HRMS Norway (Norway Payroll) with vulnerable versions 12.2.8–12.2.15. The issue enables a high-privileged attacker with network access over HTTP to compromise Oracle HRMS Norway, potentially taking over the system. CVSSv3.1 base score is 6.6 (C/H/I/A...
CVE-2026-61036
This CVE (CVE-2026-61036) affects Oracle HRMS (Norway) within Oracle E-Business Suite, specifically the Norway Payroll component, with affected versions 12.2.3-12.2.15. The vulnerability can be exploited by a high-privileged attacker over HTTP from a network access vector to perform unauthorized ...
CVE-2026-61119
CVE-2026-61119 describes a vulnerability in Oracle HRMS (UK) within Oracle E-Business Suite (UK Payroll). Affected versions are 12.2.3–12.2.15. The issue is exploitable over HTTP with network access by a low-privilege attacker, potentially leading to unauthorized creation, deletion or modificatio...
CVE-2026-61120
CVE-2026-61120 affects Oracle HRMS (US) in Oracle E-Business Suite (Internal Operations). Affected versions: 12.2.3–12.2.15. Local, low-privilege logon can compromise Oracle HRMS (US) with potential takeover, impacting confidentiality, integrity, and availability (CVSS 7.0). No root-cause or fix ...
CVE-2026-61122
CVE-2026-61122 affects Oracle E-Business Suite, Oracle HRMS (UK) Payroll component, for versions 12.2.9–12.2.15. A low-privilege, network-authenticated attacker (HTTP) can compromise HRMS(UK), leading to unauthorized creation/deletion/modification of critical data or full access to HRMS(UK) data....
CVE-2026-61214
This CVE (CVE-2026-61214) concerns Oracle HRMS (UK) within Oracle E-Business Suite, specifically the UK Payroll component. Affected versions are 12.2.3–12.2.15. The issue allows a high-privilege attacker with network access via HTTP to compromise Oracle HRMS (UK) and read a subset of data, per CV...
CVE-2026-62524
The CVE-2026-62524 vulnerability affects Oracle HRMS (US) within Oracle E-Business Suite (US Payroll - General), affecting 12.2.3–12.2.15. The issue allows a low-privileged, network-attacker (via HTTP) to compromise data: unauthorized update/insert/delete and read access to Oracle HRMS (US) data,...
CVE-2026-62557
CVE-2026-62557 affects Oracle E-Business Suite – Oracle HRMS (UK) with UK Payroll component, vulnerable in supported versions 12.2.3–12.2.15. The flaw allows a low-privilege attacker with network access over HTTP to compromise HRMS (UK), potentially leading to unauthorized access to confidential ...
CVE-2026-60950
CVE-2026-60950 affects Oracle HRMS (Ireland) within Oracle E-Business Suite, specifically the Internal Operations component. Affected versions are 12.2.3 through 12.2.15. The vulnerability can be exploited by a high-privilege attacker with network access over HTTP to perform an unauthorized read ...
CVE-2026-61117
The CVE-2026-61117 entry concerns Oracle E-Business Suite, Oracle HRMS (UK) specifically, with affected versions 12.2.8–12.2.15. The vulnerability is described as exploitable by a low-privilege attacker with network access via HTTP to compromise Oracle HRMS (UK), with potential broader impact on ...
CVE-2026-61121
Vulnerability CVE-2026-61121 affects Oracle HRMS (UK) within Oracle E-Business Suite (UK Payroll) for versions 12.2.8–12.2.15. The issue allows a low-privilege attacker with network access over HTTP to compromise Oracle HRMS (UK), with potential takeover (CVSS v3.1 base score 8.8; impacts to conf...
CVE-2026-62521
The CVE-2026-62521 entry concerns Oracle E-Business Suite, Oracle HRMS (US) Payroll General. Affected products/versions are Oracle E-Business Suite 12.2.7–12.2.15. The vulnerability permits an unauthenticated attacker with network access via HTTP to compromise Oracle HRMS (US), potentially leadin...
CVE-2026-62530
Technical details about CVE-2026-62530 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-62556
The CVE-2026-62556 affects Oracle HRMS (US) within Oracle E-Business Suite, specifically the Internal Operations component, for versions 12.2.6–12.2.15. The vulnerability can be exploited by a low-privileged attacker over HTTP with network access, potentially granting unauthorized access to Oracl...
CVE-2026-61251
CVE-2026-61251 affects Oracle E-Business Suite HRMS (Australia) Payroll component. Affected versions are 12.2.3–12.2.15. The issue allows a low-privileged, network-adjacent attacker with HTTP access to compromise HRMS Australia, potentially exposing unauthorized data. The CVSS 3.1 base score is 6...
CVE-2026-61253
CVE-2026-61253 affects Oracle HRMS (Japanese) within Oracle E-Business Suite; impacted are Oracle Payroll Japanese in versions 12.2.3–12.2.15. The vulnerability allows unauthenticated, network-accessible exploitation via HTTPS and requires user interaction to trigger. Successful exploitation can ...
CVE-2026-61254
CVE-2026-61254 affects Oracle E-Business Suite Oracle HRMS (Korea) Korean Payroll, versions 12.2.3–12.2.15. The vulnerability is in the Korean Payroll component and can be exploited over HTTP by an unauthenticated attacker, with user interaction required, to read and modify a subset of Oracle HRM...
CVE-2026-61255
The CVE-2026-61255 entry covers Oracle E-Business Suite’s Oracle HRMS (New Zealand) component, specifically New Zealand Payroll, affected in versions 12.2.3–12.2.15. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to cause unauthorized updates, inserts, deletes, and r...
CVE-2026-62456
Summary (MODE C): The CVE-2026-62456 affects Oracle E-Business Suite, Oracle HRMS (UK) – Internal Operations. Affected versions are 12.2.3–12.2.15. The vulnerability allows a low-privileged attacker with network access over HTTPS to compromise Oracle HRMS (UK), potentially leading to unauthorized...