CVE-2026-61055

HighCVSS 7.8

Published: 21/07/2026(UTC)Updated: 04/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

5th percentile - higher than 5% of all known CVEs

Summary

Vulnerability in PeopleSoft Enterprise SCM Order Management. A low-privileged attacker with local access can take over the system.

Risk Assessment

Risk of full compromise of PeopleSoft Enterprise SCM Order Management, potentially disrupting order management.

Recommendation

Apply the patch from Oracle for PeopleSoft Enterprise SCM Order Management version 9.2.

Other vulnerabilities in PeopleSoft Enterprise SCM Order Management

CVE-2026-61059Critical
A vulnerability in PeopleSoft Enterprise SCM Order Management (version 9.2) allows an unauthenticated attacker via HTTP to read and modify critical data. CVSS 9.1.

Original NVD description (English source)

Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise SCM Order Management executes to compromise PeopleSoft Enterprise SCM Order Management. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise SCM Order Management. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).