CVE-2026-101553

Modified Modified - Updated After Analysis

Oracle Payroll Data Integrity Flaw in E-Business Suite

Publication date: 2026-10-20

Last updated on: 2026-11-06

Assigner: Oracle

Description

Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Element Types, Links, Entries). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Payroll accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-11-06

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-101553

EUVD

EUVD-2026-105963

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	payroll	From 12.2.3 (inc) to 12.2.15 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Payroll within Oracle E-Business Suite. It affects versions 12.2.3 to 12.2.15 and allows a low-privileged attacker with network access to modify or delete critical payroll data or all accessible payroll data.

Detection Guidance

Detection of this vulnerability requires monitoring Oracle E-Business Suite logs and network traffic for unauthorized HTTP access to the Payroll component. Check for unusual element type, link, or entry modifications in Oracle Payroll. Review access logs for low-privileged users performing critical data changes.

Impact Analysis

An attacker could alter or delete payroll data, leading to incorrect payments, financial losses, or data corruption. This could disrupt payroll operations and affect employee compensation.

Compliance Impact

This vulnerability could lead to unauthorized data modification, violating integrity requirements in GDPR and HIPAA. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Apply the latest Oracle Critical Patch Update (CPU) for Oracle E-Business Suite to address the vulnerability in the Payroll component. Ensure network access controls restrict HTTP access to only trusted sources and limit low-privileged user permissions.

Hi! I’m here to help you understand CVE-2026-101553. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...