CVE-2026-60617
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Vulnerability in PeopleSoft Enterprise CS Campus Community (component: Security) version 9.2.38. Difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to unauthorizedly create, delete, or modify critical data and read a subset of data.
Risk Assessment
Risk includes compromise of integrity and confidentiality of campus community data, potentially leading to student data manipulation and privacy breaches.
Recommendation
Update to the latest PeopleSoft version and strengthen security configuration of the Security module.
Other vulnerabilities in PeopleSoft
See all- CVE-2026-60613Medium
Vulnerability in PeopleSoft Enterprise CS Student Records Research Tracking component. A high-privileged attacker via HTTP can take over the system.
- CVE-2026-60609Medium
Vulnerability in PeopleSoft Enterprise CS Campus Community Communication component. A low-privileged attacker via HTTPS can access critical data.
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise CS Campus Community accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise CS Campus Community accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N).