Oracle E-Business Suite vulnerabilities

Vulnerability in Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager) in versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can compromise and take over Oracle Payroll.

A vulnerability in Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations) allows a low-privileged attacker with network access via HTTPS to take over the system. Affected versions are 12.2.3-12.2.15 with a high CVSS score of 8.8.

Vulnerability in Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Affects versions 12.2.6-12.2.15. A low-privileged attacker with network access via HTTPS can easily exploit this flaw, leading to unauthorized access to critical data or complete access to all product data.

Vulnerability in Oracle Financials Common Modules of Oracle E-Business Suite (component: Common Components) in versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can easily exploit this flaw, leading to unauthorized access to critical data or full access to all module data.

In Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR) versions 12.1.1-12.1.3, an easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the system, leading to unauthorized creation, deletion, or modification of critical data and full access to all accessible data.