CVE-2026-60608

MediumCVSS 6.1

Published: 21/07/2026(UTC)Updated: 05/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

Vulnerability in PeopleSoft Enterprise CS Financial Aid (version 9.2.38). Easily exploitable, requires login and low privileges. Attacker can unauthorized create, delete or modify critical data and read a subset of data.

Risk Assessment

Risk of integrity and confidentiality breach of financial aid data, potentially leading to financial fraud.

Recommendation

Apply the Oracle patch for PeopleSoft. Restrict user privileges to the minimum necessary.

Other vulnerabilities in PeopleSoft Enterprise CS Financial Aid

CVE-2026-60607Medium
A vulnerability in PeopleSoft Enterprise CS Financial Aid allows a low-privileged attacker with local access to gain complete access to all financial aid data.

Original NVD description (English source)

Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: Institutional Methodology Need Analysis). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise CS Financial Aid executes to compromise PeopleSoft Enterprise CS Financial Aid. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise CS Financial Aid accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise CS Financial Aid accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS