Vulnerability in Oracle PeopleSoft Enterprise CC Common Application Objects
CVE-2026-61078

8.7HIGH

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Cc Common Application Objects
Vendor
CVE Published:
21 July 2026

What is CVE-2026-61078?

An access control vulnerability exists in Oracle PeopleSoft Enterprise CC Common Application Objects, affecting version 9.2. This issue allows a low-privileged attacker with network access via HTTP to exploit the application. The attack requires user interaction, enabling unauthorized activities such as creating, deleting, or modifying critical data accessible through the application. While the primary impact is on the PeopleSoft Enterprise CC Common Application Objects, successful exploitation can lead to widespread access across related products, compromising the confidentiality and integrity of sensitive information.

Affected Version(s)

PeopleSoft Enterprise CC Common Application Objects 9.2

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.