CVE-2026-60609
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
Vulnerability in PeopleSoft Enterprise CS Campus Community Communication component. A low-privileged attacker via HTTPS can access critical data.
Risk Assessment
Risk of campus community data disclosure, potentially violating student and staff privacy.
Recommendation
Update PeopleSoft to patched version 9.2.38. Monitor HTTPS traffic to the system.
Other vulnerabilities in PeopleSoft
See all- CVE-2026-60617Medium
Vulnerability in PeopleSoft Enterprise CS Campus Community (component: Security) version 9.2.38. Difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to unauthorizedly create, delete, or modify critical data and read a subset of data.
- CVE-2026-60613Medium
Vulnerability in PeopleSoft Enterprise CS Student Records Research Tracking component. A high-privileged attacker via HTTP can take over the system.
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Communication). The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS Campus Community accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).