Payroll vulnerabilities

15 known vulnerabilities in Payroll from Oracle. 15 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle Payroll: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-87363Oct 20, 2026Oracle

  Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to

• 7.5 High severity

  Oracle Payroll: Improper Access Control

  CVE-2026-101712Oct 20, 2026Oracle

  Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to

• 7.5 High severity

  Oracle Payroll: Improper Access Control

  CVE-2026-101708Oct 20, 2026Oracle

  Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to

• 7.5 High severity

  Oracle Payroll: Improper Access Control

  CVE-2026-101556Oct 20, 2026Oracle

  Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to

• 7.5 High severity

  Oracle Payroll: Improper Access Control

  CVE-2026-101555Oct 20, 2026Oracle

  Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to

• 7.5 High severity

  Oracle Payroll: Improper Access Control

  CVE-2026-101554Oct 20, 2026Oracle

  Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to

• 7.0 High severity

  Oracle Payroll: Improper Privilege Management

  CVE-2026-101544Oct 20, 2026Oracle

  Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure

• 7.7 High severity

  Oracle Payroll: Improper Access Control

  CVE-2026-70945Aug 18, 2026Oracle

  Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to co

• 8.8 High severity

  Oracle Payroll: Improper Access Control

  CVE-2026-70941Aug 18, 2026Oracle

  Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure w

• 8.8 High severity

  Oracle Payroll: Improper Privilege Management

  CVE-2026-62464Jul 21, 2026Oracle

  Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to co

• 7.7 High severity

  Oracle Payroll: Improper Access Control

  CVE-2026-61142Jul 21, 2026Oracle

  Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to co

• 8.8 High severity

  Oracle Payroll: Improper Privilege Management

  CVE-2026-60897Jul 21, 2026Oracle

  Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to co

• 7.5 High severity

  Oracle Payroll: Improper Privilege Management

  CVE-2026-60894Jul 21, 2026Oracle

  Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to

• 8.8 High severity

  Oracle Payroll: Improper Privilege Management

  CVE-2026-60890Jul 21, 2026Oracle

  Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to co

• 7.7 High severity

  Oracle Payroll: Improper Access Control

  CVE-2026-60750Jul 21, 2026Oracle

  Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to co