Vulnerability in Oracle PeopleSoft Cash Management Affects Version 9.2
CVE-2026-61062

8.8HIGH

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Fin Cash Management
Vendor
CVE Published:
21 July 2026

What is CVE-2026-61062?

A notable security vulnerability has been identified in Oracle's PeopleSoft Enterprise FIN Cash Management product, specifically in version 9.2. This vulnerability could allow an attacker with minimal permissions and access to the infrastructure hosting the application to manipulate and potentially compromise the core functionality of PeopleSoft Cash Management. Successful exploitation of this vulnerability may lead to a full takeover of the application, raising significant concerns regarding the confidentiality, integrity, and availability of sensitive financial data. It is essential for organizations utilizing this product to review their security measures and apply necessary updates as outlined by the Oracle security advisory.

Affected Version(s)

PeopleSoft Enterprise FIN Cash Management 9.2

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.