CVE-2026-62562: Medium severity Oracle Oracle E-Business Suite (Internal Operations) - Oracle HRMS (US) vulnerability
Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (US). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle HRMS (US) accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle HRMS (US) - Internal Operations (Oracle E-Business Suite)to a version that resolves this vulnerability.Fixed in 12.2.3-12.2.15
Event History
Frequently Asked Questions
What is the severity of CVE-2026-62562?
CVE-2026-62562 has a medium severity rating of 6.5.
How do I fix CVE-2026-62562?
To fix CVE-2026-62562, it is recommended to apply the latest security patches provided by Oracle for the affected versions.
What products are affected by CVE-2026-62562?
CVE-2026-62562 affects the Oracle HRMS (US) component of the Oracle E-Business Suite, specifically versions 12.2.3 to 12.2.15.
What type of attack does CVE-2026-62562 facilitate?
CVE-2026-62562 allows low privileged attackers with network access via HTTP to compromise the Oracle HRMS (US).
Is CVE-2026-62562 an easy vulnerability to exploit?
Yes, CVE-2026-62562 is considered easily exploitable due to its low privilege requirements and network access.