CVE-2026-60344

MediumCVSS 5.4

Published: 21/07/2026(UTC)Updated: 27/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

Vulnerability in Oracle HRMS (France) (component: French HR Payroll) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can gain unauthorized read and modify access to data.

Risk Assessment

Risk of unauthorized access to HR and payroll data, potentially compromising confidentiality and integrity.

Recommendation

Apply the Oracle patch for E-Business Suite versions 12.2.3-12.2.15.

Other vulnerabilities in Oracle HRMS (France)

CVE-2026-60965High
Vulnerability in Oracle HRMS (France) (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise confidentiality and integrity, gaining unauthorized access to critical data and the ability to create, delete, or modify it.

Original NVD description (English source)

Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (France). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HRMS (France) accessible data as well as unauthorized read access to a subset of Oracle HRMS (France) accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).