CVE-2026-61233

CriticalCVSS 9.8

Published: 21/07/2026(UTC)Updated: 31/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

37th percentile - higher than 37% of all known CVEs

Summary

Vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Brazil (component: Integration). Affected version is 9.1. Easily exploitable by unauthenticated attacker with network access via HTTP, potentially leading to takeover of PeopleSoft Enterprise FIN Common Objects Brazil. CVSS 9.8.

Risk Assessment

An attacker can fully compromise the system, resulting in loss of confidentiality, integrity, and availability of financial data.

Recommendation

Apply the patch provided by Oracle or upgrade to a version that fixes this vulnerability.

Original NVD description (English source)

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Common Objects Brazil. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise FIN Common Objects Brazil. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).