Oracle Payroll in the E‑Business Suite allows a low‑privileged attacker with network access via HTTP to modify, insert, or delete payroll data and read a subset of data. The vulnerability is exploitable directly through the web interface and requires only human interaction from a user other than the attacker. The impact includes both confidentiality and integrity loss, and because the vulnerability can cause a scope change, additional Oracle products may also be affected.

Oracle Corporation’s Oracle Payroll component of Oracle E‑Business Suite, versions 12.2.3 through 12.2.15. The affected versions are the ones listed in the official advisory. No additional third‑party products are specified as directly vulnerable, but scope change could extend the impact beyond Payroll.

The CVSS vector indicates a medium severity (score 5.4) with local privilege required. The EPSS score is not available, so its likelihood of exploitation is uncertain. The vulnerability is not listed in CISA KEV, and no public exploits are reported. Given the need for a low‑privileged attacker, local network access, and a human initiating the attack, the practical risk is moderate; however, the potential scope expansion increases the overall business impact if exploited.