CVE-2026-46849
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk29th percentile — higher than 29% of all known CVEs
Summary
Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle, version 9.2.38, allows a low privileged attacker with network access via HTTP to compromise the system. Successful attacks can lead to unauthorized creation, deletion, or modification of critical data.
Risk Assessment
The risk to the organization includes the potential for unauthorized access to critical data and complete control over all data accessible in PeopleSoft Enterprise CS Student Financials.
Recommendation
It is recommended to update to the latest version of the software and implement additional security measures to restrict system access to authorized users only.
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (component: Other). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student Financials. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise CS Student Financials accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Student Financials accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).