CVE-2026-60593
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Vulnerability in Oracle PeopleSoft Enterprise FIN Staffing Front Office (component: Staffing Front Office). Affected version is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise the system. Successful attack can result in unauthorized creation, deletion or modification of critical data or all accessible data.
Risk Assessment
Risk involves unauthorized modification or deletion of critical data by an external attacker.
Recommendation
Immediately apply patches provided by Oracle for version 9.2 and restrict network access to the system.
Other vulnerabilities in Oracle PeopleSoft
See all- CVE-2026-61240High
In PeopleSoft Enterprise FIN Common Objects Argentina (part of Oracle PeopleSoft) version 9.1, an easily exploitable vulnerability allows an unauthenticated attacker with access to the physical communication segment. Attacks may significantly impact additional products (scope change) and result in unauthorized access to critical data and modification capabilities.
- CVE-2026-61234High
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (part of Oracle PeopleSoft) version 9.1. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to unauthorizedly read and modify critical data. CVSS 7.4.
- CVE-2026-61210High
Vulnerability in PeopleSoft Enterprise SCM Manufacturing (part of Oracle PeopleSoft) version 9.2. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to unauthorizedly read and modify critical data. CVSS 7.4.
- CVE-2026-61205High
Vulnerability in PeopleSoft Enterprise SCM Purchasing (part of Oracle PeopleSoft) version 9.2. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to unauthorizedly modify critical data and read a subset of data. CVSS 8.2.
- CVE-2026-61104Low
Vulnerability in Oracle PeopleSoft Enterprise CS Student Records (Research Tracking component) version 9.2.38. Difficult to exploit, allows unauthenticated attacker to gain unauthorized read access to a subset of data.
- CVE-2026-61088High
Vulnerability in PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft, component Security. Affects version 9.2. An unauthenticated attacker can remotely access critical data or all data in the system via HTTP.
- CVE-2026-61087High
Vulnerability in PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft, component Security. Affects version 9.2. An unauthenticated attacker can remotely access critical data or all data in the system via HTTP.
- CVE-2026-61086High
Vulnerability in PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft, component Security. Affects version 9.2. An unauthenticated attacker can remotely access critical data or all data in the system via HTTPS.
- CVE-2026-61085High
Vulnerability in PeopleSoft Enterprise SCM Inventory product of Oracle PeopleSoft, component Security. Affects version 9.2. An unauthenticated attacker can remotely access critical data or all data in the system via HTTPS.
- CVE-2026-61074High
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft, component eProcurement. Affects version 9.1. It is difficult to exploit, but an unauthenticated attacker can remotely take over the system via HTTP.
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office product of Oracle PeopleSoft (component: Staffing Front Office). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Staffing Front Office. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise FIN Staffing Front Office accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).