Oracle HCM Common Architecture vulnerabilities

6 known vulnerabilities in Oracle HCM Common Architecture from Oracle. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Oracle HCM Common Architecture: Improper Access Control

  CVE-2026-101827Oct 20, 2026Oracle

  Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network acc

• 7.5 High severity

  Oracle HCM Common Architecture: Improper Access Control

  CVE-2026-101826Oct 20, 2026Oracle

  Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network acc

• 7.5 High severity

  Oracle HCM Common Architecture: Improper Access Control

  CVE-2026-101825Oct 20, 2026Oracle

  Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network acc

• 8.2 High severity

  Oracle HCM Common Architecture: Improper Access Control

  CVE-2026-70773Aug 18, 2026Oracle

  Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Knowledge Integration). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 7.2 High severity

  Oracle HCM Common Architecture: Improper Privilege Management

  CVE-2026-60836Jul 21, 2026Oracle

  Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network acce

• 7.5 High severity

  Oracle HCM Common Architecture: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-34297Apr 21, 2026Oracle

  Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Knowledge Integration). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network ac