Oracle Payroll vulnerabilities
16 known CVE vulnerabilities in Oracle Payroll, translated and rated.
- CVE-2026-101553Medium
Vulnerability in Oracle E-Business Suite's Oracle Payroll product (component: Element Types, Links, Entries) affecting versions 12.2.3-12.2.15. An easily exploitable flaw allows a low-privileged network attacker via HTTP to gain unauthorized create, delete or modify access to critical Oracle Payroll data.
- CVE-2026-101544High
Vulnerability in the Oracle Payroll product (component: Internal Operations) of Oracle E-Business Suite, affecting versions 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with logon to the infrastructure where Oracle Payroll executes to compromise Oracle Payroll.
- CVE-2026-101539Medium
Vulnerability in Oracle Payroll (Internal Operations component) affecting versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can exploit it to gain unauthorized access to critical data or complete access to all Oracle Payroll accessible data.
- CVE-2026-101712High
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle Payroll.
- CVE-2026-101711Medium
Vulnerability in Oracle Payroll (Payroll component) versions 12.2.3-12.2.15. A difficult-to-exploit attack via HTTP by a high-privileged attacker can lead to takeover of Oracle Payroll.
- CVE-2026-101710Medium
Vulnerability in Oracle Payroll (Internal Operations component) versions 12.2.3-12.2.15. A difficult-to-exploit attack via HTTP by a low-privileged attacker can lead to unauthorized creation, deletion, or modification of critical data and access to it.
- CVE-2026-101709Medium
Vulnerability in Oracle Payroll (Internal Operations component) versions 12.2.3-12.2.15. An easily exploitable attack via HTTP by a low-privileged attacker requires user interaction and may impact additional products (scope change), leading to data modification and read access.
- CVE-2026-101708High
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affected versions are 12.2.3-12.2.15. A difficult to exploit flaw allows a low privileged attacker with network access via HTTP to take over Oracle Payroll.
- CVE-2026-70941High
Vulnerability in Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Affects versions 12.2.3-12.2.15. A low-privileged attacker with local access can take over Oracle Payroll, and attacks may impact additional products (scope change).
- CVE-2026-62464High
Vulnerability in Oracle Payroll (versions 12.2.3-12.2.15) allows a low-privileged attacker via HTTP to fully compromise the system. CVSS 8.8.
- CVE-2026-61250Medium
Vulnerability in the Payroll component of Oracle Payroll (Oracle E-Business Suite). A low-privileged attacker via HTTP can gain full access to all payroll data, including critical data.
- CVE-2026-61216Medium
Vulnerability in the Payroll component of Oracle Payroll (Oracle E-Business Suite). A low-privileged attacker via HTTP can gain unauthorized data access (updates, inserts, deletions, read) and cause partial DoS.
- CVE-2026-61142High
Vulnerability in Oracle Payroll (component: Internal Operations) in Oracle E-Business Suite. A low-privileged attacker via HTTP can gain unauthorized access to critical data, affecting other products.
- CVE-2026-60894High
Vulnerability in Oracle Payroll (Internal Operations component) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can take over the system, but exploitation is difficult.
- CVE-2026-60893Medium
A vulnerability in Oracle Payroll allows a low-privileged attacker with local access to gain complete access to all Payroll data, with impact on other products.
- CVE-2026-60750High
Vulnerability in Oracle Payroll (component: Internal Operations) versions 12.2.3-12.2.15. Easily exploitable, requires low-privileged attacker with network access via HTTP. Successful attack can lead to unauthorized access to critical Oracle Payroll data and impact other products.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

