Human Resources

Vendor:

First CVE: Jan 21, 2016 · Active for 10 years

13

Total CVEs

More Total CVEs than 91% of tracked products

2.6

Avg CVEs / Year

Higher CVE frequency than 75% of tracked products

7.6

Avg CVSS

Higher Avg CVSS than 60% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Human Resources over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jan 21, 2016

10 years ago

Most Recent CVE

Jun 16, 2026

38 days ago

CVE Severity & Scoring

Human Resources13 CVEs

31%

38%

31%

All CVEs352,231 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local0 (0.0%)

Network12 (92.3%)

Unknown1 (7.7%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low11 (84.6%)

High1 (7.7%)

Unknown1 (7.7%)

User Interaction

None10 (76.9%)

Unknown1 (7.7%)

Required2 (15.4%)

Privileges Required

Low7 (53.8%)

High0 (0.0%)

None5 (38.5%)

Unknown1 (7.7%)

Top CVEs

Signals from CVEs in this product scope (13 CVEs).

13 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2020-2882HIGH Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3	Apr 15, 2020	8.1	50	NO	NO
CVE-2020-2586CRITICAL Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3	Jan 15, 2020	9.9	30	NO	NO
CVE-2020-2587CRITICAL Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3	Jan 15, 2020	9.9	29	NO	NO
CVE-2018-2871CRITICAL Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent: General Utilities). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3,	Apr 19, 2018	9.1	28	NO	NO
CVE-2018-2870CRITICAL Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent: General Utilities). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3,	Apr 19, 2018	9.1	28	NO	NO
CVE-2026-46955HIGH Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Person). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit v	Jun 16, 2026	7.5	26	NO	NO
CVE-2021-2365HIGH Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: People Management). Supported versions that are affected are 12.1.1-12.1.3. Easily exploi	Jul 21, 2021	8.1	26	NO	NO
CVE-2020-2956HIGH Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3	Apr 15, 2020	8.1	25	NO	NO
CVE-2021-2260HIGH Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: iRecruitment). The supported version that is affected is 12.1.3. Easily exploitable vulne	Apr 22, 2021	8.1	24	NO	NO
CVE-2018-2868MEDIUM Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent: General Utilities). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3,	Apr 19, 2018	5.3	20	NO	NO

View all 13 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (13 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (13 CVEs).

Media Mentions

Signals from CVEs in this product scope (13 CVEs).

Top CNAs Publishing CVEs For Human Resources

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
12.2.7	4	7.2	2.3%
12.2.6	4	7.2	2.3%
12.2.5	4	7.2	2.3%
12.2.4	4	7.2	2.3%
12.2.3	4	7.2	2.3%
12.1.3	5	7.4	2.1%
12.1.2	4	7.2	2.3%
12.1.1	4	7.2	2.3%
11.5.10.2	1	6.4	1.8%