What is the CVSS score of CVE-2026-62469?

CVE-2026-62469 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.1%.

Which versions of Human Resources are affected by CVE-2026-62469?

A data compromise vulnerability in Oracle E-Business Suite 12.2.14-12.2.15's Enterprise Command Center component allows low-privileged users with system access to read, create, delete, and modify all…

How to fix or mitigate CVE-2026-62469?

Within 24 hours, identify and audit all Oracle E-Business Suite 12.2.14-12.2.15 deployments with the HR module enabled and document which users have logon access to the hosting infrastructure. Within 7 days, apply Oracle Critical Patch Update July 2026 to all affected systems in a staging environment, verify functionality, and plan production rollout. Within 30 days, deploy the patch to all production Oracle E-Business Suite HR systems and audit access logs for unauthorized HR data access during the window before patching.

Human Resources CVE-2026-62469

EUVD-2026-47506 HIGH

Improper Access Control (CWE-284)

2026-07-21 secalert_us@oracle.com

GHSA-v54m-4hp3-9939

Authentication Bypass Oracle Human Resources

7.1

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

7.1 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Primary rating from Vendor (oracle) · only source for this CVE.

CVSS VectorVendor: oracle

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 21, 2026 - 23:46 vuln.today

CVE Published

Jul 21, 2026 - 22:19 nvd

HIGH 7.1

DescriptionCVE.org

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Enterprise Command Center). Supported versions that are affected are 12.2.14-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Human Resources executes to compromise Oracle Human Resources. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Human Resources accessible data as well as unauthorized access to critical data or complete access to all Oracle Human Resources accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).

AnalysisAI

Authenticated data compromise in the Enterprise Command Center component of Oracle Human Resources (Oracle E-Business Suite 12.2.14–12.2.15) lets a low-privileged user with logon access to the hosting infrastructure read, create, delete, or modify all data the HR application can reach. Oracle rates it CVSS 3.1 7.1 with High confidentiality and integrity impact and no availability impact, and it is addressed in the Oracle Critical Patch Update of July 2026. No public exploit is identified at time of analysis and it is not listed in CISA KEV.