Vulnerability in Oracle HRMS (UK) Payroll Solution

CVE-2026-61260

What is CVE-2026-61260?

An easily exploitable vulnerability in Oracle HRMS (UK), part of the Oracle E-Business Suite, affects several versions of the product. A low-privileged attacker with network access via HTTP may exploit this vulnerability, potentially leading to unauthorized updates, inserts, or deletions of data. There is also a risk of unauthorized reading of accessible data. The vulnerability specifically concerns the UK Payroll component and emphasizes the need for organizations using affected versions to apply necessary security patches as detailed in Oracle's security advisory.

References