CVE-2026-60613
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
Vulnerability in PeopleSoft Enterprise CS Student Records Research Tracking component. A high-privileged attacker via HTTP can take over the system.
Risk Assessment
Risk of full takeover of student records system, leading to data manipulation and service disruption.
Recommendation
Apply the PeopleSoft patch for version 9.2.38. Strengthen authentication for high-privileged users.
Other vulnerabilities in PeopleSoft
See all- CVE-2026-60617Medium
Vulnerability in PeopleSoft Enterprise CS Campus Community (component: Security) version 9.2.38. Difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to unauthorizedly create, delete, or modify critical data and read a subset of data.
- CVE-2026-60609Medium
Vulnerability in PeopleSoft Enterprise CS Campus Community Communication component. A low-privileged attacker via HTTPS can access critical data.
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft (component: Research Tracking). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Student Records. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise CS Student Records. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).