Human Resources Management System vulnerabilities

22 known vulnerabilities in Human Resources Management System from Oracle. 22 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  Oracle HRMS (India): Improper Access Control

  CVE-2026-87161Sep 15, 2026Oracle

  Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 7.1 High severity

  Oracle HRMS (India): Improper Access Control

  CVE-2026-87160Sep 15, 2026Oracle

  Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS

• 8.1 High severity

  Oracle HRMS (India): Improper Access Control

  CVE-2026-87159Sep 15, 2026Oracle

  Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 7.2 High severity

  Oracle HRMS (Netherlands): Improper Access Control

  CVE-2026-71104Aug 18, 2026Oracle

  Vulnerability in the Oracle HRMS (Netherlands) product of Oracle E-Business Suite (component: Netherlands Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access vi

• 7.8 High severity

  Oracle HRMS (US): Improper Access Control

  CVE-2026-71101Aug 18, 2026Oracle

  Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Tax Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructu

• 8.0 High severity

  Oracle HRMS (US): Improper Access Control

  CVE-2026-70690Aug 18, 2026Oracle

  Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP

• 7.7 High severity

  Oracle HRMS (UK): Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-62567Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis

• 7.1 High severity

  Oracle HRMS (US): Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-62565Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year End). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to

• 7.8 High severity

  Oracle HRMS (US): Improper Privilege Management

  CVE-2026-62561Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure

• 7.7 High severity

  Oracle HRMS (Norway): Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-62560Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP

• 7.1 High severity

  Oracle HRMS (UK): Improper Access Control

  CVE-2026-62557Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis

• 9.6 Critical severity

  Oracle HRMS (UK): Improper Access Control

  CVE-2026-62549Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis

• 7.2 High severity

  Oracle HRMS (US): Improper Privilege Management

  CVE-2026-62548Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to

• 8.1 High severity

  Oracle HRMS (France): Improper Access Control

  CVE-2026-62530Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compro

• 7.5 High severity

  Oracle HRMS (US): Improper Access Control

  CVE-2026-62521Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General). Supported versions that are affected are 12.2.7-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t

• 8.2 High severity

  Oracle HRMS (UK): Improper Privilege Management

  CVE-2026-62456Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS

• 8.1 High severity

  Oracle HRMS (UK): Improper Access Control

  CVE-2026-61122Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis

• 8.8 High severity

  Oracle HRMS (UK): Improper Privilege Management

  CVE-2026-61121Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis

• 7.0 High severity

  Oracle HRMS (US): Improper Privilege Management

  CVE-2026-61120Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructu

• 7.1 High severity

  Oracle HRMS (UK): Improper Access Control

  CVE-2026-61119Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis

• 8.1 High severity

  Oracle HRMS (France): Improper Access Control

  CVE-2026-60965Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compro

• 7.2 High severity

  Oracle HRMS (UK): Improper Privilege Management

  CVE-2026-46953Jun 17, 2026Oracle

  Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromi