CVE-2026-46954

HighCVSS 7.2

Published: 21/07/2026(UTC)Updated: 27/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

35th percentile - higher than 35% of all known CVEs

Summary

Vulnerability in Oracle Human Resources (component: Data Removal Tool) versions 12.2.3-12.2.15. Allows a high-privileged attacker with network access via HTTP to take over the system.

Risk Assessment

Successful attack can lead to full compromise of Oracle Human Resources, risking confidentiality, integrity, and availability of HR data.

Recommendation

Apply the patch provided by Oracle for supported versions immediately and restrict HTTP access to trusted networks.

Other vulnerabilities in Oracle Human Resources

CVE-2026-46955High
Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Person). Supported versions affected are 12.2.3-12.2.15, and the vulnerability is difficult to exploit, requiring human interaction.

Original NVD description (English source)

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Data Removal Tool). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Human Resources. Successful attacks of this vulnerability can result in takeover of Oracle Human Resources. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).