Oracle HRMS (US) vulnerabilities

7 known vulnerabilities in Oracle HRMS (US) from Oracle. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Oracle HRMS (US): Improper Access Control

  CVE-2026-71101Aug 18, 2026Oracle

  Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Tax Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructu

• 8.0 High severity

  Oracle HRMS (US): Improper Access Control

  CVE-2026-70690Aug 18, 2026Oracle

  Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP

• 7.1 High severity

  Oracle HRMS (US): Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-62565Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year End). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to

• 7.8 High severity

  Oracle HRMS (US): Improper Privilege Management

  CVE-2026-62561Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure

• 7.2 High severity

  Oracle HRMS (US): Improper Privilege Management

  CVE-2026-62548Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to

• 7.5 High severity

  Oracle HRMS (US): Improper Access Control

  CVE-2026-62521Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll - General). Supported versions that are affected are 12.2.7-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t

• 7.0 High severity

  Oracle HRMS (US): Improper Privilege Management

  CVE-2026-61120Jul 21, 2026Oracle

  Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructu