7.5High
CVE-2026-101555
Description
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful attacks of this vulnerability can result in takeover of Oracle Payroll. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
Weakness (CWE):
CWE-284
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Oracle Corporation | Oracle Payroll | 12.2.3 – ≤ 12.2.15 | |
| oracle | payroll | 12.2.3 – ≤ 12.2.15 |
References and patches
- Oracle Advisory vendor-advisoryVendor Advisory
CPE matches (NVD) (1)
cpe:2.3:a:oracle:payroll:*:*:*:*:*:*:*:*≥ 12.2.3 ≤ 12.2.15