CVE-2026-61236
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (version 9.1) allows an unauthenticated attacker via HTTP to gain unauthorized access to all data. CVSS 7.5 (confidentiality only).
Risk Assessment
The attack could expose all data in the system, including critical organizational data.
Recommendation
Apply Oracle patches for PeopleSoft Enterprise FIN Common Objects Brazil version 9.1.
Other vulnerabilities in PeopleSoft Enterprise FIN Common Objects Brazil
See all- CVE-2026-70861High
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (component: Common Objects) version 9.1. A high-privileged attacker with network access via T3 or IIOP can compromise the system. Successful attacks may result in full takeover of PeopleSoft Enterprise FIN Common Objects Brazil.
- CVE-2026-61232High
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (version 9.1) allows an unauthenticated attacker via HTTP to gain unauthorized access to all data. CVSS 7.5 (confidentiality only).
- CVE-2026-61073High
In PeopleSoft Enterprise FIN Common Objects Brazil version 9.1, a vulnerability in the Purchasing component allows an unauthenticated attacker to remotely access critical data via HTTP. CVSS 7.5 (confidentiality).
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Staffing). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Common Objects Brazil. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN Common Objects Brazil accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).