CVE-2026-61254

Awaiting Analysis Awaiting Analysis - Queue

Oracle E-Business Suite HRMS Korean Payroll Data Access

Publication date: 2026-07-21

Last updated on: 2026-07-24

Assigner: Oracle

Description

Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HRMS (Republic of Korea). Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HRMS (Republic of Korea) accessible data as well as unauthorized read access to a subset of Oracle HRMS (Republic of Korea) accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-24

Generated

2026-08-11

AI Q&A

2026-07-22

EPSS Evaluated

2026-08-09

NVD

CVE-2026-61254

EUVD

EUVD-2026-47443

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	human_resources_management_system	From 12.2.3 (inc) to 12.2.15 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-601	The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle HRMS (Republic of Korea) within Oracle E-Business Suite. It affects versions 12.2.3 to 12.2.15. An unauthenticated attacker can exploit it via HTTP to gain unauthorized access to data, including read, update, insert, or delete capabilities for some data. Human interaction from a victim is required for exploitation.

Detection Guidance

Detection requires checking for Oracle E-Business Suite versions 12.2.3-12.2.15 with the Korean Payroll component exposed via HTTP. Monitor network traffic for unauthorized access attempts to Oracle HRMS (Republic of Korea) endpoints. Review logs for unusual data modification or access patterns in the HRMS module.

Impact Analysis

If exploited, this vulnerability could allow attackers to modify or delete sensitive payroll data in Oracle HRMS (Republic of Korea). Unauthorized access to data may lead to privacy breaches or financial discrepancies. Organizations using affected versions should apply patches promptly.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR (data protection) and HIPAA (healthcare data privacy). Non-compliance risks include fines, legal penalties, and reputational damage due to compromised sensitive data.

Mitigation Strategies

Apply Oracle's official security patches for versions 12.2.3-12.2.15. Restrict HTTP access to the Korean Payroll component via firewall rules. Disable unnecessary services and enforce strong authentication for all HRMS-related modules. Monitor for suspicious activity in the HRMS data.

Hi! I’m here to help you understand CVE-2026-61254. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70