CVE-2026-91356
MediumCVSS 4.2Summary
Vulnerability in PeopleSoft Enterprise HCM Global Payroll Switzerland (component Global Payroll for Switzerland) affecting version 9.2. An easily exploitable attack by a high-privileged attacker with logon to the infrastructure can result in unauthorized update, insert, or delete access to some data, unauthorized read access to a subset of data, and partial denial of service.
Risk Assessment
Compromise of confidentiality, integrity, and availability of payroll data may occur, potentially leading to salary errors or service disruptions. It requires high privileges, limiting the attack vector.
Recommendation
Update PeopleSoft Enterprise HCM Global Payroll Switzerland to the latest version. Limit the number of high-privilege accounts and monitor their activity.
Other vulnerabilities in PeopleSoft Enterprise HCM Global Payroll Switzerland
See all- CVE-2026-61235Critical
PeopleSoft Enterprise HCM Global Payroll Switzerland (version 9.2) contains a vulnerability that allows a high-privileged authenticated attacker to compromise the system via HTTP. The attack may impact other products (scope change).
- CVE-2026-60665High
Vulnerability in PeopleSoft Enterprise HCM Global Payroll Switzerland (version 9.2) allows a low-privileged attacker over HTTP to gain unauthorized access and modify critical data. Exploitation is difficult and impacts other products.
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland). The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise HCM Global Payroll Switzerland executes to compromise PeopleSoft Enterprise HCM Global Payroll Switzerland. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise HCM Global Payroll Switzerland accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise HCM Global Payroll Switzerland accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise HCM Global Payroll Switzerland. CVSS 3.1 Base Score 4.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS