CVE-2026-101539

Vulnerability in Oracle E-Business Suite's Oracle Payroll product (component: Element Types, Links, Entries) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged network attacker via HTTP to gain unauthorized create, delete or modify access to critical Oracle Payroll data.

Vulnerability in the Oracle Payroll product (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with logon to the infrastructure where Oracle Payroll executes to compromise Oracle Payroll.

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle Payroll.

Vulnerability in Oracle Payroll (Payroll component) versions 12.2.3-12.2.15. A difficult-to-exploit attack via HTTP by a high-privileged attacker can lead to takeover of Oracle Payroll.

Vulnerability in Oracle Payroll (Internal Operations component) versions 12.2.3-12.2.15. A difficult-to-exploit attack via HTTP by a low-privileged attacker can lead to unauthorized creation, deletion, or modification of critical data and access to it.

Vulnerability in Oracle Payroll (Internal Operations component) versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low-privileged attacker requires user interaction and may impact additional products (scope change), leading to data modification and read access.

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle Payroll.

Vulnerability in Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker with local access can take over Oracle Payroll, and attacks may impact additional products (scope change).

Vulnerability in Oracle Payroll (versions 12.2.3-12.2.15) allows a low-privileged attacker via HTTP to fully compromise the system. CVSS 8.8.

Vulnerability in the Payroll component of Oracle Payroll (Oracle E-Business Suite). A low-privileged attacker via HTTP can gain full access to all payroll data, including critical data.