CVE-2026-91541
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (Common Objects component) affecting version 9.1. An unauthenticated attacker via HTTP can modify data and cause partial denial of service. CVSS 6.5.
Risk Assessment
Possible unauthorized changes to common data and availability disruptions without authentication, increasing risk to financial systems.
Recommendation
Apply the Oracle update for version 9.1 and restrict network access to the PeopleSoft application.
Other vulnerabilities in PeopleSoft Enterprise FIN Common Objects Brazil
See all- CVE-2026-91476Medium
Vulnerability in the eProcurement component of PeopleSoft Enterprise FIN Common Objects Brazil (Oracle PeopleSoft) affecting version 9.1. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of data accessible in the application.
- CVE-2026-91474Medium
Vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Brazil (component eProcurement) version 9.1. A high-privileged attacker with access to the physical communication segment can create, delete, or modify critical data and gain full access to it without authorization.
- CVE-2026-70861High
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (component: Common Objects) version 9.1. A high-privileged attacker with network access via T3 or IIOP can compromise the system. Successful attacks may result in full takeover of PeopleSoft Enterprise FIN Common Objects Brazil.
- CVE-2026-61236High
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (version 9.1) allows an unauthenticated attacker via HTTP to gain unauthorized access to all data. CVSS 7.5 (confidentiality only).
- CVE-2026-61232High
Vulnerability in PeopleSoft Enterprise FIN Common Objects Brazil (version 9.1) allows an unauthenticated attacker via HTTP to gain unauthorized access to all data. CVSS 7.5 (confidentiality only).
- CVE-2026-61073High
In PeopleSoft Enterprise FIN Common Objects Brazil version 9.1, a vulnerability in the Purchasing component allows an unauthenticated attacker to remotely access critical data via HTTP. CVSS 7.5 (confidentiality).
Original NVD description (English source)
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Common Objects Brazil. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise FIN Common Objects Brazil accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise FIN Common Objects Brazil. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS