CVE-2026-60607

MediumCVSS 5.5

Published: 21/07/2026(UTC)Updated: 05/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

A vulnerability in PeopleSoft Enterprise CS Financial Aid allows a low-privileged attacker with local access to gain complete access to all financial aid data.

Risk Assessment

An attacker could read all student financial aid data, compromising confidentiality and privacy.

Recommendation

Apply the Oracle patch and restrict local access to PeopleSoft servers.

Other vulnerabilities in PeopleSoft Enterprise CS Financial Aid

CVE-2026-60608Medium
Vulnerability in PeopleSoft Enterprise CS Financial Aid (version 9.2.38). Easily exploitable, requires login and low privileges. Attacker can unauthorized create, delete or modify critical data and read a subset of data.

Original NVD description (English source)

Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: FM Need Analysis Calculator). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise CS Financial Aid executes to compromise PeopleSoft Enterprise CS Financial Aid. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Financial Aid accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS