CVE-2026-60894

Vulnerability in Oracle E-Business Suite's Oracle Payroll product (component: Element Types, Links, Entries) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged network attacker via HTTP to gain unauthorized create, delete or modify access to critical Oracle Payroll data.

Vulnerability in the Oracle Payroll product (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with logon to the infrastructure where Oracle Payroll executes to compromise Oracle Payroll.

Vulnerability in Oracle Payroll (Internal Operations component) affecting versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can exploit it to gain unauthorized access to critical data or complete access to all Oracle Payroll accessible data.

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle Payroll.

Vulnerability in Oracle Payroll (Payroll component) versions 12.2.3-12.2.15. A difficult-to-exploit attack via HTTP by a high-privileged attacker can lead to takeover of Oracle Payroll.

Vulnerability in Oracle Payroll (Internal Operations component) versions 12.2.3-12.2.15. A difficult-to-exploit attack via HTTP by a low-privileged attacker can lead to unauthorized creation, deletion, or modification of critical data and access to it.

Vulnerability in Oracle Payroll (Internal Operations component) versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low-privileged attacker requires user interaction and may impact additional products (scope change), leading to data modification and read access.

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle Payroll.

Vulnerability in Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker with local access can take over Oracle Payroll, and attacks may impact additional products (scope change).

Vulnerability in Oracle Payroll (versions 12.2.3-12.2.15) allows a low-privileged attacker via HTTP to fully compromise the system. CVSS 8.8.