Live › vulnerability › CVE-2026-83360
Go to dashboardOracle E-Business Suite's Oracle HRMS (Republic of Korea) product, in its Korean Payroll component, has a flaw that lets an attacker with a low-privileged account reach HRMS data over HTTP. Successful exploitation gives unauthorized read access to critical payroll and HR data, with no integrity or availability impact per the CVSS vector.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle E-Business Suite with the Oracle HRMS (Republic of Korea) product and the Korean Payroll component in supported versions 12.2.3 through 12.2.15. The attacker needs a low-privileged account and network access over HTTP. Teams without Oracle E-Business Suite or without the Korean localization can skip it.
No product ranges from the sources yet.
12.2.3 through 12.2.15Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (Republic of Korea). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle HRMS (Republic of Korea) accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-83360")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.