CVE-2026-60665
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Vulnerability in PeopleSoft Enterprise HCM Global Payroll Switzerland (version 9.2) allows a low-privileged attacker over HTTP to gain unauthorized access and modify critical data. Exploitation is difficult and impacts other products.
Risk Assessment
An attacker can read and modify sensitive payroll data, and the vulnerability may spread to other PeopleSoft systems.
Recommendation
Install the Oracle patch for PeopleSoft 9.2. Restrict user privileges and monitor HTTP traffic.
Other vulnerabilities in PeopleSoft Enterprise HCM Global Payroll Switzerland
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Global Payroll Switzerland. While the vulnerability is in PeopleSoft Enterprise HCM Global Payroll Switzerland, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise HCM Global Payroll Switzerland accessible data as well as unauthorized access to critical data or complete access to all PeopleSoft Enterprise HCM Global Payroll Switzerland accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N).