CVE Catalog

CVE-2026-61073

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.38%

30th percentile - higher than 30% of all known CVEs

Summary

In PeopleSoft Enterprise FIN Common Objects Brazil version 9.1, a vulnerability in the Purchasing component allows an unauthenticated attacker to remotely access critical data via HTTP. CVSS 7.5 (confidentiality).

Risk Assessment

An attacker can gain full access to PeopleSoft Enterprise FIN Common Objects Brazil data, risking leakage of sensitive financial information.

Recommendation

Apply the Oracle patch or update to a fixed version.

Other vulnerabilities in PeopleSoft Enterprise FIN Common Objects Brazil

See all
Original NVD description (English source)

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Purchasing). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Common Objects Brazil. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN Common Objects Brazil accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS