Vulnerability in PeopleSoft Enterprise CC Application by Oracle
CVE-2026-61307

8.1HIGH

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Cc Common Application Objects
Vendor
CVE Published:
18 August 2026

What is CVE-2026-61307?

A vulnerability exists in the Oracle PeopleSoft Enterprise CC Common Application Objects component, specifically in version 9.2. This flaw allows an unauthenticated attacker to gain access to the system over the network via Oracle Net, posing a significant risk of compromising the integrity and availability of the application. If exploited, the attacker can take over the PeopleSoft Enterprise CC Common Application Objects, leading to potential data breaches and operational disruptions.

Affected Version(s)

PeopleSoft Enterprise CC Common Application Objects 9.2

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.