CVE-2026-61201
CriticalCVSS 9.0Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
Vulnerability in PeopleSoft Enterprise CRM Common Objects allows an unauthenticated attacker via HTTP to take over the system. Exploitation is difficult but may affect other products.
Risk Assessment
An attacker can take over PeopleSoft CRM and potentially impact other systems, leading to loss of confidentiality and integrity.
Recommendation
Apply the patch from Oracle for version 9.2.23 and monitor HTTP traffic to the system.
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle PeopleSoft (component: Common Objects). The supported version that is affected is 9.2.23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CRM Common Objects. While the vulnerability is in PeopleSoft Enterprise CRM Common Objects, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise CRM Common Objects. CVSS 3.1 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).