Oracle Time And Labor vulnerabilities

15 CVEs affecting Oracle Time And Labor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-62508, published 2026-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-10086, published 2019-08-20. High severity, CVSS 7.3. EPSS: 28.4% chance of exploitation in the next 30 days. In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all…
CVE-2020-6950, published 2021-06-02. Medium severity, CVSS 6.5. EPSS: 10.1% chance of exploitation in the next 30 days. Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.
CVE-2019-17091, published 2019-10-02. Medium severity, CVSS 6.1. EPSS: 2.5% chance of exploitation in the next 30 days. faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client…
CVE-2021-2415, published 2021-07-21. High severity, CVSS 8.1. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Timecard). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable…
CVE-2021-2239, published 2021-04-22. High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Timecard). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable…
CVE-2026-62503, published 2026-07-21. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-62504, published 2026-07-21. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-62494, published 2026-07-21. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-60951, published 2026-07-21. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-61012, published 2026-07-21. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…

Latest

CVE-2026-62508, published 2026-07-21. Low severity, CVSS 3.1. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit…
CVE-2026-62507, published 2026-07-21. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit…
CVE-2026-62505, published 2026-07-21. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-61015, published 2026-07-21. Low severity, CVSS 3.7. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit…
CVE-2026-61013, published 2026-07-21. Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit…