CVE-2026-60602

HighCVSS 8.8

Published: 21/07/2026(UTC)Updated: 05/08/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

32th percentile - higher than 32% of all known CVEs

Summary

Vulnerability in PeopleSoft Enterprise CS Student Financials (Billing component) version 9.2.38. Low-privileged attacker via HTTP can take over the system.

Risk Assessment

Risk of full takeover of PeopleSoft Student Financials, leading to student financial data breach.

Recommendation

Apply Oracle patch for version 9.2.38. Restrict network access.

Other vulnerabilities in PeopleSoft Enterprise CS Student Financials

CVE-2026-46849High
Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle, version 9.2.38, allows a low privileged attacker with network access via HTTP to compromise the system. Successful attacks can lead to unauthorized creation, deletion, or modification of critical data.

Original NVD description (English source)

Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Oracle PeopleSoft (component: Billing). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student Financials. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise CS Student Financials. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).