CVE-2026-60596
LowCVSS 2.3Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
In PeopleSoft Enterprise FIN eSettlements version 9.2, an easily exploitable vulnerability in the eSettlements component allows an authenticated attacker with high privileges and local access to gain unauthorized read access to a subset of data.
Risk Assessment
An attacker with administrator privileges could read sensitive financial data, potentially leading to confidentiality breaches.
Recommendation
Restrict access to the PeopleSoft system to trusted administrators only and monitor activity of high-privilege users.
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise FIN eSettlements product of Oracle PeopleSoft (component: eSettlements). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN eSettlements executes to compromise PeopleSoft Enterprise FIN eSettlements. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise FIN eSettlements accessible data. CVSS 3.1 Base Score 2.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).