CVE-2026-34306

MediumCVSS 6.5

Published: 21/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

Vulnerability in PeopleSoft Enterprise FIN Project Costing (component: Projects) affecting version 9.2. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data.

Risk Assessment

Low exploitation barrier and HTTP access increase the risk of financial and project data leakage. This may compromise the confidentiality of business information.

Recommendation

Apply the Oracle patch for PeopleSoft Enterprise FIN Project Costing 9.2 and restrict network access to the application and account privileges.

Other vulnerabilities in PeopleSoft Enterprise FIN Project Costing

CVE-2026-60600High
Vulnerability in PeopleSoft Enterprise FIN Project Costing (component: Projects) allows an unauthenticated attacker with local access, after user interaction, to take over the system. Version 9.2 is affected.

Original NVD description (English source)

Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Project Costing. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN Project Costing accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS