CVE-2026-61062

HighCVSS 8.8

Published: 21/07/2026(UTC)Updated: 04/08/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

5th percentile - higher than 5% of all known CVEs

Summary

Vulnerability in PeopleSoft Enterprise FIN Cash Management. A low-privileged attacker with local access can take over the system, and the attack may affect other products.

Risk Assessment

Risk of attack escalation to other systems, increasing potential damage.

Recommendation

Apply the patch from Oracle for PeopleSoft Enterprise FIN Cash Management version 9.2.

Other vulnerabilities in PeopleSoft Enterprise FIN Cash Management

CVE-2026-60597High
Vulnerability in PeopleSoft Enterprise FIN Cash Management. Difficult to exploit, unauthenticated attacker via HTTP can compromise data confidentiality and integrity, affecting other products.

Original NVD description (English source)

Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN Cash Management executes to compromise PeopleSoft Enterprise FIN Cash Management. While the vulnerability is in PeopleSoft Enterprise FIN Cash Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Cash Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).