Human Resources Management System CVE-2026-61121

Oracle HRMS (UK) Payroll in E-Business Suite versions 12.2.8-12.2.15 contains a critical vulnerability allowing low-privileged network users to fully compromise the payroll module, exposing employee and financial data to unauthorized access and manipulation. Affected organizations face immediate risk of payroll fraud, data breaches, and operational disruption. Urgent network isolation and access controls are required until vendor patches are released.

Within 24 hours: inventory all systems running Oracle E-Business Suite 12.2.8 through 12.2.15 and confirm HRMS UK Payroll module deployment; map network accessibility and document current access controls. Within 7 days: implement network segmentation to restrict HTTP access to the module to authorized users only, enable IP whitelisting for module access, review and remove excessive low-privilege user access, and activate enhanced logging for HRMS authentication and privilege events. Within 30 days: monitor Oracle Critical Patch Update announcements; test patched versions in non-production environment; deploy fixes to all affected systems as soon as vendor releases patched versions of E-Business Suite.

No vendor-released patch identified at time of analysis. Interim mitigations: (1) implement network-layer segmentation and IP-based access controls to restrict HRMS module access to authorized locations; (2) enforce application-level authentication and session monitoring; (3) deploy Web Application Firewall rules to detect exploitation attempts; (4) conduct access control review to minimize low-privilege user rights on the module; (5) establish enhanced alerting for suspicious authentication activity and privilege escalation events.