Oracle Oracle Human Resources

Name: Oracle Oracle Human Resources
Brand: Oracle

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical0high0medium0low

updated 2026-10-28

vulnerabilities (59)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-46902US	—OT elevated	0.47% (41st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46946US	—	0.46% (40th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46945US	—	0.46% (40th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46896US	—	0.46% (40th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46970US	—	0.45% (39th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46969US	—	0.45% (39th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46960US	—	0.45% (39th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46956US	—	0.45% (39th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46944US	—	0.45% (39th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46938US	—	0.45% (39th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46922US	—OT elevated	0.45% (39th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46973US	—OT elevated	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46965US	—OT elevated	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46962US	—OT elevated	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46961US	—OT elevated	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46951US	—OT elevated	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46950US	—	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46947US	—	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46942US	—OT elevated	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46940US	—OT elevated	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46937US	—OT elevated	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46933US	—OT elevated	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46931US	—	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46929US	—OT elevated	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46918US	—	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46895US	—	0.41% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46949US	—	0.40% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46930US	—	0.40% (35th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46967US	—	0.40% (34th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46964US	—OT elevated	0.40% (34th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46963US	—	0.40% (34th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46952US	—OT elevated	0.40% (34th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46900US	—	0.40% (34th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-21960US	—	0.38% (31st)	—	no fix	2026-01-20	≤ vers:unknown/*
CVE-2026-46927US	—OT elevated	0.37% (31st)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46901US	—	0.37% (30th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46897US	—	0.37% (30th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-21959US	—	0.36% (30th)	—	no fix	2026-01-20	≤ vers:unknown/*
CVE-2026-46932US	—	0.36% (30th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46898US	—	0.36% (29th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46939US	—	0.34% (28th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46899US	—	0.34% (28th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46976US	—	0.34% (27th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46953US	—	0.34% (27th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46915US	—	0.32% (25th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46966US	—OT elevated	0.31% (24th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46957US	—	0.31% (24th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46935US	—OT elevated	0.31% (24th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46934US	—OT elevated	0.31% (24th)	—	no fix	2026-06-17	≤ vers:unknown/*
CVE-2026-46928US	—OT elevated	0.31% (23rd)	—	no fix	2026-06-17	≤ vers:unknown/*

showing 50 of 59

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control45 CVEs
CWE-269Improper Privilege Management27 CVEs
CWE-306Missing Authentication for Critical Function23 CVEs
CWE-287Improper Authentication12 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs

sources (1)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)59 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan