Threats affecting pkg:maven/com.oracle/hcm-common-architecture

CVE-2026-101827 is a vulnerability in Oracle HCM Common Architecture versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to potentially compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, unauthorized access to all accessible data, and partial denial of service. The vulnerability is rated high severity with a CVSS 3.1 base score of 7.1.

CVE-2026-101826 is a vulnerability in Oracle HCM Common Architecture versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to potentially take over the Oracle HCM Common Architecture component. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability.

CVE-2026-101825 is a vulnerability in Oracle HCM Common Architecture versions 12.2.3 through 12.2.15. It allows a low privileged attacker with network access via HTTP to potentially take over the Oracle HCM Common Architecture component. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability.

Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HCM Common Architecture. Successful attacks of this vulnerability can result in takeover of Oracle HCM Common Architecture. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

CVE-2026-34297 is a high-severity vulnerability in Oracle HCM Common Architecture versions 12.2.3 to 12.2.15. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within the Oracle HCM Common Architecture. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a significant confidentiality impact without requiring user interaction or privileges. Oracle has included this vulnerability in its April 2026 Critical Patch Update advisory but has not explicitly confirmed patch availability or remediation status for this specific issue.