CVE-2026-61235
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
PeopleSoft Enterprise HCM Global Payroll Switzerland (version 9.2) contains a vulnerability that allows a high-privileged authenticated attacker to compromise the system via HTTP. The attack may impact other products (scope change).
Risk Assessment
A high-privileged attacker can fully compromise the PeopleSoft Payroll system for Switzerland, leading to loss of confidentiality, integrity, and availability of payroll data and potentially other systems.
Recommendation
Apply the security patch from Oracle for PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2 or restrict network access to the system to trusted users only.
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise HCM Global Payroll Switzerland. While the vulnerability is in PeopleSoft Enterprise HCM Global Payroll Switzerland, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise HCM Global Payroll Switzerland. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).