Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (France). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HRMS (France) accessible data as well as unauthorized read access to a subset of Oracle HRMS (France) accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Oracle |
|
No data.
No data.
References
| Link | Providers |
|---|---|
| https://www.oracle.com/security-alerts/cpujul2026.html |
|
History
Tue, 04 Aug 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Low‑Privilege HTTP Attack Enables Unauthorized Data Modification and Read in Oracle HRMS (France) |
Thu, 30 Jul 2026 15:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Low‑Privilege HTTP Attack Enables Unauthorized Data Modification and Read in Oracle HRMS (France) |
Tue, 28 Jul 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Low‑Privilege Network Attack Enabling Unauthorized Data Modification and Read in Oracle HRMS (France) |
Mon, 27 Jul 2026 11:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Fri, 24 Jul 2026 01:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Low‑Privilege Network Attack Enabling Unauthorized Data Modification and Read in Oracle HRMS (France) | |
| Weaknesses | CWE-284 |
Tue, 21 Jul 2026 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (France). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HRMS (France) accessible data as well as unauthorized read access to a subset of Oracle HRMS (France) accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N). | |
| First Time appeared |
Oracle
Oracle hrms |
|
| CPEs | cpe:2.3:a:oracle:hrms:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Oracle
Oracle hrms |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: oracle
Published: 2026-07-21T21:34:34.654Z
Updated: 2026-07-27T10:47:11.929Z
Reserved: 2026-07-08T15:51:40.531Z
Link: CVE-2026-60344
Vulnrichment
Updated: 2026-07-27T10:41:39.555Z
NVD
No data.
Redhat
No data.