CVE-2026-46827: High severity Oracle Oracle E-Business Suite Payroll vulnerability
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful attacks of this vulnerability can result in takeover of Oracle Payroll. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46827?
The severity of CVE-2026-46827 is rated high with a CVSS score of 8.8.
How do I fix CVE-2026-46827?
To fix CVE-2026-46827, ensure that your Oracle E-Business Suite Payroll is upgraded to an unaffected version, specifically 12.2.16 or later.
Who is affected by CVE-2026-46827?
Organizations using Oracle E-Business Suite Payroll versions 12.2.3 to 12.2.15 are affected by CVE-2026-46827.
What type of vulnerability is CVE-2026-46827?
CVE-2026-46827 is an easily exploitable vulnerability that allows low-privileged attackers to compromise Oracle Payroll via HTTP.
What components are involved in CVE-2026-46827?
CVE-2026-46827 involves the Self Service Manager component of the Oracle Payroll product within the Oracle E-Business Suite.