Threats affecting pkg:maven/com.oracle/OracleHumanResources

CVE-2026-62466 is a high-severity vulnerability in the Oracle Human Resources product of Oracle E-Business Suite, specifically in the Data Removal Tool component. It affects supported versions from 12.2.3 through 12.2.15. The vulnerability allows a high privileged attacker with network access via HTTP to compromise the Oracle Human Resources system, potentially leading to full takeover. The CVSS 3.1 base score is 7.2, indicating significant confidentiality, integrity, and availability impacts. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for this specific issue. No known exploits in the wild have been reported at this time.

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Person). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Human Resources. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Human Resources. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).