The vulnerability in Oracle Payroll, part of Oracle E‑Business Suite, allows an attacker with high privileges and network access via HTTP to compromise the Payroll component. Successful exploitation can lead to full takeover, giving the attacker control over the confidentiality, integrity, and availability of payroll data and processes. The CVE description does not specify the underlying weakness type.

Affected systems include Oracle Corporation's Oracle Payroll product within the E‑Business Suite. All supported releases from version 12.2.3 through 12.2.15 are impacted. Versions outside this range are not vulnerable.

The CVSS 3.1 base score of 6.6 reflects moderate to high severity. Based on the description, it is inferred that remote network access over HTTP is sufficient for exploitation, but the attacker already needs a high‑privileged account. The EPSS score is < 1% and the issue is not listed in the CISA KEV catalog. Environments with inadequate privilege segregation or weak privilege policies may experience higher risk.