Oracle HRMS (India) vulnerabilities

Vulnerability in Oracle HRMS (India) (Indian Payroll component) affecting versions 12.2.3-12.2.15. A low-privileged attacker with local logon can gain unauthorized access to critical data or all data accessible in the product, and attacks may impact additional products (scope change).

Vulnerability in Oracle HRMS (India) (component: Internal Operations) in versions 12.2.3-12.2.15. A low-privileged attacker can gain unauthorized access to critical data and modify some data via HTTP, with potential impact on other products.

Vulnerability in Oracle HRMS (India) (component: Internal Operations) in versions 12.2.3-12.2.15. A low-privileged attacker can gain unauthorized access to critical data and modify some data via HTTPS.

Vulnerability in Oracle HRMS (India) (component: Internal Operations) in versions 12.2.3-12.2.15. A low-privileged attacker can create, delete, or modify critical data and gain full access via HTTP.